Threats tagged 'ghsa-mrpq-9jr3-rqq9'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.3%	CVE-2025-64132Io.jenkins.plugins:mcp server: Jenkins MCP Server Plugin does not perform permission checks in multiple MCP tools Medium5.4EPSS 0.3%2025-10-29GCVE DatabaseCVE-2025-64132 Jenkins MCP Server Plugin versions 0.84.v50ca_24ef83f2 and earlier lack proper permission checks in several MCP tools. This flaw allows attackers with limited permissions to access or trigger actions they should not be authorized for, such as obtaining SCM configuration details, triggering builds, or retrieving cloud names without sufficient privileges. The issue is fixed in version 0.86.v7d3355e6a. EPSS 0.3%Report on CVE-2025-64132 Vulnerability CWE-862 #ghsa-mrpq-9jr3-rqq9 #maven	GCVE Database	2025-10-29

Page 1 of 1