Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.jenkins.plugins:macstadium-orka

4 known vulnerabilities (1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 high, 2 medium
Registry
Maven Central

Advisories 4

  • A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read permission to connect…

    Affected: fixed in 1.34.

  • CVE-2023-24433Medium 6.5

    Missing permission checks in Jenkins Orka by MacStadium Plugin 1.31 and earlier allow attackers with Overall/Read permission to connect to…

    Affected: fixed in 1.32.

  • A cross-site request forgery (CSRF) vulnerability in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers to connect to an…

    Affected: fixed in 1.32.

  • CVE-2023-24431Medium 4.3

    A missing permission check in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers with Overall/Read permission to…

    Affected: fixed in 1.32.