Vulnerabilities > Jenkins > Recipe > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-06-30 CVE-2022-34794 Missing Authorization vulnerability in Jenkins Recipe 1.0/1.1/1.2
Missing permission checks in Jenkins Recipe Plugin 1.2 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML.
network
low complexity
jenkins CWE-862
6.5