VYPR

Maven package

org.jenkins-ci.plugins/weblogic-deployer-plugin

pkg:maven/org.jenkins-ci.plugins/weblogic-deployer-plugin

Vulnerabilities (2)

  • CVE-2019-10465Oct 23, 2019
    affected <= 4.1

    A missing permission check in Jenkins Deploy WebLogic Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins

  • CVE-2019-10464Oct 23, 2019
    affected <= 4.1

    A cross-site request forgery vulnerability in Jenkins Deploy WebLogic Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials, or determine whether a file or directory with an attacker-specified path exists on the Jenkins master file s