Scp Publisher (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2022-02-15. Vendor: Jenkins.

CVEs of Scp Publisher

• CVE-2022-25199 - CVSS 8.8 (high), 2022-02-15: A missing permission check in Jenkins SCP publisher Plugin 1.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified…
• CVE-2022-25198 - CVSS 8.8 (high), 2022-02-15: A cross-site request forgery (CSRF) vulnerability in Jenkins SCP publisher Plugin 1.8 and earlier allows attackers to connect to an attacker-specified SSH…