Jenkins: >> Mongodb >> 1.3 Security Vulnerabilities
A missing permission check in Jenkins MongoDB Plugin 1.3 and earlier allows attackers with Overall/Read permission to gain access to some metadata of any arbitrary files on the Jenkins controller.
CVSS Score
4.3
EPSS Score
0.0
Published
2020-09-16
A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary files on the Jenkins controller.
CVSS Score
8.8
EPSS Score
0.001
Published
2020-09-16