Threats tagged 'ghsa-h83r-7f9f-mqjj'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2025-64142Org.jenkins ci.plugins:nexus task runner: Jenkins Nexus Task Runner Plugin is missing a permission check Medium4.3EPSS 0.2%2025-10-29GCVE DatabaseCVE-2025-64142 Jenkins Nexus Task Runner Plugin versions 0.9.2 and earlier lack a permission check on an HTTP endpoint, allowing users with Overall/Read permission to connect to arbitrary URLs with attacker-specified credentials. The endpoint also does not require POST requests, enabling a cross-site request forgery (CSRF) vulnerability. No fix is currently available. EPSS 0.2%Report on CVE-2025-64142 Vulnerability CWE-862 #ghsa-h83r-7f9f-mqjj #maven	GCVE Database	2025-10-29

Page 1 of 1