Openstack Heat

openstack_heat

Vendor: Jenkins • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-36913 1Jenkins 1Openstack Heat Jun 17, 2026 Jul 27, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Jenkins Openstack Heat Plugin 1.5 and earlier does not perform permission checks in methods implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specifie...Show more Jenkins Openstack Heat Plugin 1.5 and earlier does not perform permission checks in methods implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.Show less
CVE-2022-36912 1Jenkins 1Openstack Heat Jun 17, 2026 Jul 27, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 A missing permission check in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
CVE-2022-36911 1Jenkins 1Openstack Heat Jun 17, 2026 Jul 27, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A cross-site request forgery (CSRF) vulnerability in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers to connect to an attacker-specified URL.