Junglewise Threat Intelligence

CVE-2022-34781: Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow capturing credentials

CVE-2022-34781 · Severity: low · CVSS 3.1 · Published 2022-07-01

Technologies: com.xebialabs.ci:xlrelease-plugin (Maven). Vendors: Maven.

Executive brief

Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow capturing credentials

Affected products

Maven com.xebialabs.ci:xlrelease-plugin

Related threats

CSRF vulnerability in Jenkins XebiaLabs XL Release Plugin allow capturing credentials
Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow enumerating credentials IDs