Maven package

org.jenkins-ci.plugins/sumologic-publisher

pkg:maven/org.jenkins-ci.plugins/sumologic-publisher

Vulnerabilities (2)

CVE	Sev	CVSS	KEV	Affected versions	Fixed in	Published	Description
CVE-2023-37959	Med	6.5		<= 2.2.1	—	Jul 12, 2023	A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
CVE-2023-37958	Hig	8.8		<= 2.2.1	—	Jul 12, 2023	A cross-site request forgery (CSRF) vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an attacker-specified URL.

CVE-2023-37959MedJul 12, 2023
affected <= 2.2.1
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
CVE-2023-37958HigJul 12, 2023
affected <= 2.2.1
A cross-site request forgery (CSRF) vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an attacker-specified URL.