Login Request a demo
KA
Product
Katalon
by Jenkins · last CVE Oct 19, 2022
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities4Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Katalon to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-43419
6.5
1%
Oct 19
Jenkins Katalon Plugin 1.0.32 and earlier stores API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read…
Affected: before 1.0.33
CVE-2022-43417
4.3
1%
Oct 19
Jenkins Katalon Plugin 1.0.32 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an…
Affected: before 1.0.33
CVE-2022-43418
4.3
0%
Oct 19
A cross-site request forgery (CSRF) vulnerability in Jenkins Katalon Plugin 1.0.33 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified…
Affected: before 1.0.34
Showing 3