VYPR

Maven package

org.jenkins-ci.plugins/mongodb

pkg:maven/org.jenkins-ci.plugins/mongodb

Vulnerabilities (2)

  • CVE-2020-2268Sep 16, 2020
    affected <= 1.3

    A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary files on the Jenkins controller.

  • CVE-2020-2267Sep 16, 2020
    affected <= 1.3

    A missing permission check in Jenkins MongoDB Plugin 1.3 and earlier allows attackers with Overall/Read permission to gain access to some metadata of any arbitrary files on the Jenkins controller.