Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54940
HistoryMar 31, 2022 - 12:00 a.m.

Jenkins JiraTestResultReporter Plugin跨站请求伪造漏洞

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

34.5%

Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier versions are vulnerable to cross-site request forgery, which stems from a form validation method that does not require a POST request The vulnerability can be exploited to connect to a specified URL using its specified credentials.

0.001 Low

EPSS

Percentile

34.5%