Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Jenkins Embeddable Build Status Plugin 2.0.3 and earlier does not correctly perform the ViewStatus permission check in the HTTP endpoint it provides for "unprotected" status badge access, allowing attackers without any permissions to obtain the build status badge icon for any attacker-specified job and/or build.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jenkins Plugin Embeddable Build Status 安全漏洞
Vulnerability Description
Jenkins和Jenkins Plugin都是Jenkins开源的产品。Jenkins是一个应用软件。一个开源自动化服务器Jenkins提供了数百个插件来支持构建，部署和自动化任何项目。Jenkins Plugin是一个应用软件。 Jenkins Plugin Embeddable Build Status 2.0.3及之前版本存在安全漏洞，该漏洞源于无法在它为“未受保护”状态标志访问提供的 HTTP 端点中正确执行 ViewStatus 权限检查，攻击者利用该漏洞能够获取任何攻击者指定的作业或构建的构
CVSS Information
N/A
Vulnerability Type
N/A