Jenkins Assembla vulnerabilities

2 known vulnerabilities affecting jenkins/assembla.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-37961HIGHCVSS 8.8≤ 1.142023-07-12

CVE-2023-37961 [HIGH] CWE-352 CVE-2023-37961: A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier a A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to trick users into logging in to the attacker's account.

CVE-2019-10420MEDIUMCVSS 5.5≤ 1.42019-09-25

CVE-2019-10420 [MEDIUM] CWE-522 CVE-2019-10420: Jenkins Assembla Plugin stores credentials unencrypted in its global configuration file on the Jenki Jenkins Assembla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.