Maven package

org.jenkins-ci.plugins/google-cloud-backup

pkg:maven/org.jenkins-ci.plugins/google-cloud-backup

Vulnerabilities (2)

CVE	Sev	CVSS	KEV	Affected versions	Fixed in	Published	Description
CVE-2022-36917	Med	4.3		<= 0.6	—	Jul 27, 2022	A missing permission check in Jenkins Google Cloud Backup Plugin 0.6 and earlier allows attackers with Overall/Read permission to request a manual backup.
CVE-2022-36916	Hig	8.0		<= 0.6	—	Jul 27, 2022	A cross-site request forgery (CSRF) vulnerability in Jenkins Google Cloud Backup Plugin 0.6 and earlier allows attackers to request a manual backup.

CVE-2022-36917MedJul 27, 2022
affected <= 0.6
A missing permission check in Jenkins Google Cloud Backup Plugin 0.6 and earlier allows attackers with Overall/Read permission to request a manual backup.
CVE-2022-36916HigJul 27, 2022
affected <= 0.6
A cross-site request forgery (CSRF) vulnerability in Jenkins Google Cloud Backup Plugin 0.6 and earlier allows attackers to request a manual backup.