Threats tagged 'ghsa-x2pv-fph3-phfx'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2025-64141Org.jenkins ci.plugins:nexus task runner: Jenkins Nexus Task Runner Plugin vulnerable to cross-site request forgery Medium4.3EPSS 0.2%2025-10-29GCVE DatabaseCVE-2025-64141 The Jenkins Nexus Task Runner Plugin version 0.9.2 and earlier contains a vulnerability where an HTTP endpoint does not perform proper permission checks and does not require POST requests. This results in a cross-site request forgery (CSRF) vulnerability that allows attackers with Overall/Read permission to connect to attacker-specified URLs using attacker-specified credentials. No fix is currently available for this issue. EPSS 0.2%Report on CVE-2025-64141 Vulnerability CWE-352 #ghsa-x2pv-fph3-phfx #maven	GCVE Database	2025-10-29

Page 1 of 1