Filtered by vendor Barchart Subscriptions
Filtered by product Maven Cascade Release Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-2295 1 Barchart 1 Maven Cascade Release 2023-11-03 6.5 Medium
A cross-site request forgery (CSRF) vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout builds, and reconfigure the plugin.
CVE-2020-2294 1 Barchart 1 Maven Cascade Release 2023-10-25 6.5 Medium
Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfigure the plugin.