Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: jenkins

Published: 2023-12-13T17:30:15.589Z

Updated: 2024-08-28T14:31:02.880Z

Reserved: 2023-12-13T13:06:36.477Z

Link: CVE-2023-50767

cve-icon Vulnrichment

Updated: 2024-08-02T22:16:47.269Z

cve-icon NVD

Status : Modified

Published: 2023-12-13T18:15:43.890

Modified: 2024-11-21T08:37:16.497

Link: CVE-2023-50767

cve-icon Redhat

No data.