VYPR

Frugal Testing

by Jenkins Project

CVEs (2)

  • CVE-2023-41947MedSep 6, 2023
    risk 0.28cvss 4.3epss 0.00

    A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials.

  • CVE-2023-41946LowSep 6, 2023
    risk 0.23cvss 3.5epss 0.00

    A cross-site request forgery (CSRF) vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from Frugal Testing, if a valid credential corresponds to the…