Security Advisory
CVE-2023-32999
4.3
MEDIUM
Vulnerability Description
A missing permission check in Jenkins AppSpider Plugin 1.0.15 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL and send an HTTP POST request with a JSON payload consisting of attacker-specified credentials.
Published Date
May 16, 2023
Official Source
NIST NVD Advisory