-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:openshift-deployer | maven | <= 1.2.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from a missing permission check in a form validation method. Jenkins plugins typically implement form validation through doCheck* methods in Descriptor classes. The advisory specifically mentions this occurs in 'a method implementing form validation' related to URL/credential verification. The OpenShift Deployer Plugin would need such methods to validate() OpenShift server connections, and the lack of permission checks in these methods aligns with the described attack vector where attackers with Read permissions can abuse the validation endpoint.
JavaJavaOngoing coverage of React2Shell