Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-06-23	CVE-2022-34205	Cross-Site Request Forgery (CSRF) vulnerability in Jenkins Jianliao Notification 1.0/1.1 A cross-site request forgery (CSRF) vulnerability in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers to send HTTP POST requests to an attacker-specified URL. network low complexity jenkins CWE-352	6.5
2022-06-23	CVE-2022-34206	Missing Authorization vulnerability in Jenkins Jianliao Notification 1.0/1.1 A missing permission check in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers with Overall/Read permission to send HTTP POST requests to an attacker-specified URL. network low complexity jenkins CWE-862	4.3