Veille CVE

Recherche « Jenkins contrast continuous application security »

3 CVE

Critique 0 Élevée 0 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Jenkins contrast continuous application security » ✕
  1. CVE-2026-57299 4.3 Moyenne

    Jenkins Project Jenkins Contrast Continuous Application Security Plugin · Jenkins contrast continuous application security

    Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.

  2. CVE-2026-57298 5.4 Moyenne

    Jenkins Project Jenkins Contrast Continuous Application Security Plugin

    A cross-site request forgery (CSRF) vulnerability in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers to have Jenkins connect to an attacker-specified URL using an attacker-specified username, API key, and service key.

  3. CVE-2026-57297 4.3 Moyenne

    Jenkins Project Jenkins Contrast Continuous Application Security Plugin · Jenkins contrast continuous application security

    A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username, API key, and service key.