Swamp (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2022-02-15. Vendor: Jenkins.

CVEs of Swamp

• CVE-2022-25211 - CVSS 8.8 (high), 2022-02-15: A missing permission check in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web…
• CVE-2022-25212 - CVSS 8.8 (high), 2022-02-15: A cross-site request forgery (CSRF) vulnerability in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers to connect to an attacker-specified web server…