Junglewise Threat Intelligence

CVE-2023-30526: Jenkins Report Portal Plugin missing permissions check

CVE-2023-30526 · Severity: low · CVSS 3.1 · Published 2023-04-12

Technologies: org.jenkins-ci.plugins:reportportal (Maven). Vendors: Maven.

Executive brief

Jenkins Report Portal Plugin missing permissions check

Affected products

Maven org.jenkins-ci.plugins:reportportal

Related threats

Jenkins Report Portal Plugin allows users with Item/Extended Read permission to view tokens on Jenkins controller
Jenkins Report Portal Plugin configuration form does not mask tokens
Jenkins Report Portal Plugin Cross-Site Request Forgery vulnerability