-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability description explicitly states that form validation methods lacked permission checks. In Jenkins plugins, form validation is typically implemented via doCheck* methods in Descriptor classes. The advisory specifies that the fix requires Item/Configure permission for pattern validation, indicating the vulnerable functions are the validation handlers for workspace file patterns. The naming convention (doCheckPattern) and location (plugin descriptor) follow Jenkins plugin development standards, though exact paths are inferred due to lack of code/diff access.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| io.jenkins.plugins:warnings-ng | maven | <= 8.4.4 | 8.5.0 |
JavaJavaOngoing coverage of React2Shell