Description
A missing permission check in Jenkins EasyQA Plugin 1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server.
Remediation
References
https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2281
Related Vulnerabilities
CVE-2023-37277 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-war
CVE-2020-1954 Vulnerability in maven package org.apache.cxf:cxf-rt-management
CVE-2023-34054 Vulnerability in maven package io.projectreactor.netty:reactor-netty-http
CVE-2014-0034 Vulnerability in maven package org.apache.cxf.services.sts:cxf-services-sts-core
CVE-2019-10301 Vulnerability in maven package org.jenkins-ci.plugins:gitlab-plugin