Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-84066
HistoryMar 17, 2022 - 12:00 a.m.

Jenkins Release Helper Plugin Cross-Site Request Forgery Vulnerability

2022-03-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

32.0%

Jenkins is a software project that is a Java-based continuous integration tool for monitoring continuous and repetitive work, designed to provide an open and easy-to-use software platform that allows software projects to be continuously integrated.A cross-site request forgery vulnerability exists in Jenkins Release Helper Plugin 1.3.3 and prior versions, which stems from The plugin lacks validation for cross-site request forgery tokens. An attacker could exploit this vulnerability to connect to a specified URL using specified credentials.

0.001 Low

EPSS

Percentile

32.0%

Related for CNVD-2022-84066