Test Results Aggregator

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-37956 Jul 12, 16:15 Maven MEDIUM This Month

A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Test Results Aggregator

NVD

CVSS 3.1

6.5

EPSS

0.6%

CVE-2023-37955 Jul 12, 16:15 Maven MEDIUM PATCH This Month

A cross-site request forgery (CSRF) vulnerability in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Jenkins Test Results Aggregator

NVD

CVSS 3.1

6.5

EPSS

0.4%

CVE-2023-37956 Maven

EPSS 1% CVSS 6.5

MEDIUM This Month

Authentication Bypass Jenkins Test Results Aggregator

NVD

CVE-2023-37955 Maven

EPSS 0% CVSS 6.5

MEDIUM PATCH This Month

CSRF Jenkins Test Results Aggregator

NVD