-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe commit 7dc2906 adds both permission checks (Jenkins.get().checkPermission) and @RequirePOST annotation to doTestApiConnection, directly addressing the two vulnerability aspects described in CVE-2023-37955. The advisory specifically mentions form validation endpoints with missing security controls, and this is the only function modified in the patch that matches those characteristics.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:test-results-aggregator | maven | <= 1.2.13 | 1.2.16 |
JavaJavaOngoing coverage of React2Shell