Jenkins P4 Plugin (Jenkins Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2021-05-11. Vendor: Jenkins Project.

CVEs of Jenkins P4 Plugin

• CVE-2021-21655 - CVSS 7.1 (high), 2021-05-11: A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server…
• CVE-2021-21654 - CVSS 4.3 (medium), 2021-05-11: Jenkins P4 Plugin 1.11.4 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to connect…
• CVE-2020-2142 - CVSS 4.3 (medium), 2020-03-09: A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds.
• CVE-2020-2141 - CVSS 4.3 (medium), 2020-03-09: A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce.