Jenkins CloudBees CD Plugin 1.1.21 and previous versions does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
jenkins cloudbees cd |