Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-49806
HistoryMay 19, 2022 - 12:00 a.m.

Jenkins SSH Plugin Cross-Site Request Forgery Vulnerability

2022-05-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
86

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins SSH Plugin 2.6.1 and earlier versions are vulnerable to cross-site request forgery, which can be exploited by attackers to capture credentials stored in Jenkins.

CPENameOperatorVersion
Jenkins SSH Pluginlt2.6.1