-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe advisory explicitly states two flaws: 1) Missing permission check allowing Item/Read users to delete logs, and 2) CSRF vulnerability from accepting non-POST requests. In Jenkins plugin architecture, these would manifest in the HTTP endpoint handler (typically doGet/doPost methods) and the core deletion logic. The combination of unrestricted HTTP method handling (GET for state-changing operations) and missing permission validation in these functions directly enables both vulnerabilities.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:delete-log-plugin | maven | <= 1.0 |
JavaJavaKEV Misses 88% of Exploited CVEs- Get the report