-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:rhnpush-plugin | maven | <= 0.5.1 | 0.5.2 |
JavaJavaMiggo AIRoot Cause AnalysisThe vulnerability stems from missing permission checks in form validation methods. The GitHub commit 7827db3 shows a security fix adding 'project.checkPermission(Item.WORKSPACE)' to the doCheckIncludes method. This method handles pattern validation against workspace contents, and the absence of this check in versions ≤0.5.1 allowed unauthorized access. The method's purpose aligns exactly with the vulnerability description of workspace content probing via file pattern validation.
Ongoing coverage of React2Shell