Jenkins Project Jenkins Sumologic Publisher Plugin

• CVE-2023-37959 Unrated A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL. 0.5%
• CVE-2023-37958 Unrated A cross-site request forgery (CSRF) vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an attacker-specified URL. 0.5%