diff --git a/advisories/github-reviewed/2022/05/GHSA-7rx6-4vwv-432g/GHSA-7rx6-4vwv-432g.json b/advisories/github-reviewed/2022/05/GHSA-7rx6-4vwv-432g/GHSA-7rx6-4vwv-432g.json index 6e1cf415948..4a4fafcaf2d 100644 --- a/advisories/github-reviewed/2022/05/GHSA-7rx6-4vwv-432g/GHSA-7rx6-4vwv-432g.json +++ b/advisories/github-reviewed/2022/05/GHSA-7rx6-4vwv-432g/GHSA-7rx6-4vwv-432g.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-7rx6-4vwv-432g", - "modified": "2023-08-04T19:15:59Z", + "modified": "2023-10-27T14:26:45Z", "published": "2022-05-24T17:48:06Z", "aliases": [ "CVE-2021-21647" ], - "summary": "Missing permission check in CloudBees CD Plugin allows scheduling builds", - "details": "CloudBees CD Plugin does not perform a permission check in an HTTP endpoint.\n\nThis allows attackers with Item/Read permission to schedule builds of projects without having Item/Build permission.\n\nCloudBees CD Plugin requires Item/Build permission to schedule builds via its HTTP endpoint.", + "summary": "Missing permission check in Jenkins CloudBees CD Plugin allows scheduling builds", + "details": "Jenkins CloudBees CD Plugin does not perform a permission check in an HTTP endpoint.\n\nThis allows attackers with Item/Read permission to schedule builds of projects without having Item/Build permission.\n\nJenkins CloudBees CD Plugin requires Item/Build permission to schedule builds via its HTTP endpoint.", "severity": [ { "type": "CVSS_V3", @@ -20,11 +20,6 @@ "ecosystem": "Maven", "name": "org.jenkins-ci.plugins:electricflow" }, - "ecosystem_specific": { - "affected_functions": [ - "" - ] - }, "ranges": [ { "type": "ECOSYSTEM", @@ -44,11 +39,6 @@ "ecosystem": "Maven", "name": "org.jenkins-ci.plugins:electricflow" }, - "ecosystem_specific": { - "affected_functions": [ - "" - ] - }, "ranges": [ { "type": "ECOSYSTEM",