-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability describes a missing permission check in a form validation method. In Jenkins plugins, form validation methods are typically named 'doCheck*' and reside in DescriptorImpl classes. The ScriptApproval class handles script security validations, and its DescriptorImpl would be responsible for configuration-related checks. The advisory specifically mentions form validation methods requiring permission checks, aligning with Jenkins' security patterns. The high confidence comes from the direct match between the vulnerability description and Jenkins' architectural patterns, though exact method names are inferred without patch details.
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:script-security | maven | < 1368.vb | 1368.vb |
Ongoing coverage of React2Shell