-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:mongodb | maven | <= 1.3 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from missing permission checks in form validation methods, as explicitly stated in the Jenkins advisory (SECURITY-1904). Jenkins plugins typically implement form validation via doCheck* methods in configuration classes. The advisory specifies these validation methods were accessible without proper authorization, allowing metadata exposure. The combination of CWE-862 classification and the plugin's functionality to handle file-related metadata confirms these methods as the attack vector.
Ongoing coverage of React2Shell