Nexus Platform (Jenkins) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-12-13. Vendor: Jenkins.

CVEs of Nexus Platform

• CVE-2023-50769 - CVSS 4.3 (medium), 2023-12-13: Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to connect to an…
• CVE-2023-50768 - CVSS 8.8 (high), 2023-12-13: A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to connect to an attacker-specified…
• CVE-2023-50767 - CVSS 5.4 (medium), 2023-12-13: Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to send an HTTP request to an…
• CVE-2023-50766 - CVSS 8.8 (high), 2023-12-13: A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to send an HTTP request to an…