Jenkins Project Jenkins Assembla Auth Plugin

• CVE-2023-41945 Unrated Jenkins Assembla Auth Plugin 1.14 and earlier does not verify that the permissions it grants are enabled, resulting in users with EDIT permissions to be granted Overall/Manage and Overall/SystemRead p 0.7%
• CVE-2023-37961 Unrated A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to trick users into logging in to the attacker's account. 0.5%