CVE Catalog
CVE-2023-37959
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.45%
36th percentile - higher than 36% of all known CVEs
Summary
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
Risk Assessment
The organization may be exposed to unauthorized access to data or systems through connections to malicious URLs.
Recommendation
It is recommended to update the Sumologic Publisher Plugin to the latest version to eliminate the permission check vulnerability.
Original NVD description (English source)
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.