CVE-2022-28136

2022-03-2913:15:08

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.5%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.

CPENameOperatorVersion
jiratestresultreporter-plugineqJiraTestResultReporter-1.0.2
jiratestresultreporter-plugineqJiraTestResultReporter-2.0.12
jiratestresultreporter-plugineqwiki-link
jiratestresultreporter-plugineqJiraTestResultReporter-2.0.15
jiratestresultreporter-plugineqJiraTestResultReporter-1.0.4
jiratestresultreporter-plugineqJiraTestResultReporter-2.0.5
jiratestresultreporter-plugineqJiraTestResultReporter-2.0.2
jiratestresultreporter-plugineqJiraTestResultReporter-2.0.10
jiratestresultreporter-plugineqJiraTestResultReporter-2.0.11
jiratestresultreporter-plugineqJiraTestResultReporter-1.0.1

Name	Operator	Version
jiratestresultreporter-plugin	eq	JiraTestResultReporter-1.0.2
jiratestresultreporter-plugin	eq	JiraTestResultReporter-2.0.12
jiratestresultreporter-plugin	eq	wiki-link
jiratestresultreporter-plugin	eq	JiraTestResultReporter-2.0.15
jiratestresultreporter-plugin	eq	JiraTestResultReporter-1.0.4
jiratestresultreporter-plugin	eq	JiraTestResultReporter-2.0.5
jiratestresultreporter-plugin	eq	JiraTestResultReporter-2.0.2
jiratestresultreporter-plugin	eq	JiraTestResultReporter-2.0.10
jiratestresultreporter-plugin	eq	JiraTestResultReporter-2.0.11
jiratestresultreporter-plugin	eq	JiraTestResultReporter-1.0.1