Threats tagged 'ghsa-6mgr-3374-4p3c'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2025-64138Org.jenkins ci.plugins:windocks start container: Jenkins Start Windocks Containers Plugin vulnerable to cross-site Medium4.3EPSS 0.2%2025-10-29GCVE DatabaseCVE-2025-64138 The Jenkins Start Windocks Containers Plugin version 1.4 and earlier has a vulnerability where it does not perform permission checks on an HTTP endpoint. This flaw allows attackers with Overall/Read permission to connect to arbitrary URLs specified by the attacker. Additionally, the endpoint is vulnerable to cross-site request forgery (CSRF) because it does not require POST requests. No fix is currently available for this vulnerability. EPSS 0.2%Report on CVE-2025-64138 Vulnerability CWE-352 #ghsa-6mgr-3374-4p3c #maven	GCVE Database	2025-10-29

Page 1 of 1