Skip to main content

Threadfix

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2022-34210 Maven MEDIUM This Month

A missing permission check in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Threadfix
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-34209 Maven MEDIUM This Month

A cross-site request forgery (CSRF) vulnerability in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers to connect to an attacker-specified URL. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Jenkins Threadfix
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2022-34210 Maven
EPSS 1% CVSS 6.5
MEDIUM This Month

A missing permission check in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Jenkins Threadfix
NVD
CVE-2022-34209 Maven
EPSS 1% CVSS 6.5
MEDIUM This Month

A cross-site request forgery (CSRF) vulnerability in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers to connect to an attacker-specified URL. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Jenkins Threadfix
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy