-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaJavaMiggo AIRoot Cause AnalysisThe commit 79ae204 explicitly adds permission checks to these two methods. The vulnerability description specifically mentions missing authorization in form validation methods for credential enumeration. The patched methods correspond to credential validation (doValidateCredential) and credential ID listing (doFillCredentialsIdItems) functionality, which would directly expose credential IDs if unprotected. The CWE-862 (Missing Authorization) alignment and the direct correlation between patch changes and vulnerability description confirm these as the vulnerable functions.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| com.xebialabs.deployit.ci:deployit-plugin | maven | <= 10.0.1 | 10.0.2 |
Ongoing coverage of React2Shell