Jenkins Perfecto Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2020-09-16. Vendor: Jenkins Project.

CVEs of Jenkins Perfecto Plugin

• CVE-2020-2261 - CVSS 8.8 (high), 2020-09-16: Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with Job/Configure permission to run arbitrary…
• CVE-2020-2260 - CVSS 4.3 (medium), 2020-09-16: A missing permission check in Jenkins Perfecto Plugin 1.17 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP…