CVE Catalog
CVE-2023-37956
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.51%
40th percentile - higher than 40% of all known CVEs
Summary
A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
Risk Assessment
Attackers may gain access to malicious resources, potentially leading to data leakage or system compromise.
Recommendation
It is recommended to update the plugin to the latest version to eliminate the permission check vulnerability.
Original NVD description (English source)
A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.