Jiratestresultreporter

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-28137 Maven MEDIUM PATCH This Month

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Jiratestresultreporter

NVD

CVSS 3.1

4.3

EPSS

0.7%

CVE-2022-28136 Maven HIGH PATCH This Week

A cross-site request forgery (CSRF) vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Jenkins Jiratestresultreporter

NVD

CVSS 3.1

8.8

EPSS

0.7%

CVE-2022-28137 Maven

EPSS 1% CVSS 4.3

MEDIUM PATCH This Month

Authentication Bypass Jenkins Jiratestresultreporter

NVD

CVE-2022-28136 Maven

EPSS 1% CVSS 8.8

HIGH PATCH This Week

CSRF Jenkins Jiratestresultreporter

NVD