Threats tagged 'ghsa-223m-4rfp-646h'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.5%	CVE-2025-59475Org.jenkins ci.main:jenkins core: Jenkins is missing a permission check in the authenticated users' profile menu Medium4.3EPSS 0.5%2025-09-17GCVE DatabaseCVE-2025-59475 Jenkins versions 2.527 and earlier, including LTS 2.516.2 and earlier, have a vulnerability where the authenticated user profile dropdown menu does not perform a permission check. This flaw allows attackers without Overall/Read permission to gather limited information about the Jenkins configuration, such as the presence of certain plugins. The issue is fixed in Jenkins versions 2.516.3 and 2.528, which require Overall/Read permission to access these menu items. EPSS 0.5%Report on CVE-2025-59475 Vulnerability CWE-862 #ghsa-223m-4rfp-646h #maven	GCVE Database	2025-09-17

Page 1 of 1