Maven/org.jenkins-ci.plugins:sumologic-publisher CVE-2023-37959: medium 6.5, EPSS 0.55%

Jenkins Sumologic Publisher Plugin missing permission check

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-mx84-frhw-pcg8
• https://nvd.nist.gov/vuln/detail/CVE-2023-37959
• https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3117
• http://www.openwall.com/lists/oss-security/2023/07/12/2

CVE-2023-37959 · published 2023-07-12T18:30:39Z · modified 2024-02-16T08:23:14.474828Z · JSON