Frugal Testing

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-41947 Sep 06, 13:15 Maven MEDIUM This Month

A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Frugal Testing

NVD

CVSS 3.1

4.3

EPSS

0.4%

CVE-2023-41946 Sep 06, 13:15 Maven LOW Monitor

A cross-site request forgery (CSRF) vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CSRF Jenkins Frugal Testing

NVD

CVSS 3.1

3.5

EPSS

0.3%

CVE-2023-41947 Maven

EPSS 0% CVSS 4.3

MEDIUM This Month

Authentication Bypass Jenkins Frugal Testing

NVD

CVE-2023-41946 Maven

EPSS 0% CVSS 3.5

LOW Monitor

CSRF Jenkins Frugal Testing

NVD