VYPR

Release Helper

by Jenkins Project

CVEs (2)

  • CVE-2022-27215MedMar 15, 2022
    risk 0.28cvss 4.3epss 0.01

    A missing permission check in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.

  • CVE-2022-27214MedMar 15, 2022
    risk 0.28cvss 4.3epss 0.00

    A cross-site request forgery (CSRF) vulnerability in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.