Threats tagged 'ghsa-mj6v-4wr4-gj57'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2025-64139Org.jenkins ci.plugins:windocks start container: Jenkins Start Windocks Containers Plugin is missing a permission Medium4.3EPSS 0.2%2025-10-29GCVE DatabaseCVE-2025-64139 The Jenkins Start Windocks Containers Plugin version 1.4 and earlier lacks proper permission checks on an HTTP endpoint. This flaw allows users with Overall/Read permission to connect to arbitrary URLs specified by an attacker. Additionally, the endpoint does not require POST requests, enabling a cross-site request forgery (CSRF) vulnerability. No fix is currently available for this issue. EPSS 0.2%Report on CVE-2025-64139 Vulnerability CWE-862 #ghsa-mj6v-4wr4-gj57 #maven	GCVE Database	2025-10-29

Page 1 of 1