-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:jianliao | maven | <= 1.1 |
JavaJavaMiggo AIRoot Cause AnalysisThe advisory explicitly mentions a form validation() method with missing permission checks and CSRF protection. In Jenkins plugins, connection test endpoints (like doTest* methods) in DescriptorImpl classes are common vectors for such issues. The combination of missing @RequirePOST annotation (allowing GET access) and lack of permission validation matches the described vulnerability pattern. This aligns with Jenkins' security best practices where form validation() methods require POST requests and proper authorization checks.
Ongoing coverage of React2Shell