CVE-2022-28138

2022-03-2913:15:08

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.2%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credential.

CPENameOperatorVersion
rocketchatnotifier-plugineq1.2.2
rocketchatnotifier-plugineq1.0.1
rocketchatnotifier-plugineq1.3.0
rocketchatnotifier-plugineq1.4.10
rocketchatnotifier-plugineq0.3.0
rocketchatnotifier-plugineq1.0.2
rocketchatnotifier-plugineq1.0.4
rocketchatnotifier-plugineq1.3.2
rocketchatnotifier-plugineq1.2.1
rocketchatnotifier-plugineq0.5.4

Name	Operator	Version
rocketchatnotifier-plugin	eq	1.2.2
rocketchatnotifier-plugin	eq	1.0.1
rocketchatnotifier-plugin	eq	1.3.0
rocketchatnotifier-plugin	eq	1.4.10
rocketchatnotifier-plugin	eq	0.3.0
rocketchatnotifier-plugin	eq	1.0.2
rocketchatnotifier-plugin	eq	1.0.4
rocketchatnotifier-plugin	eq	1.3.2
rocketchatnotifier-plugin	eq	1.2.1
rocketchatnotifier-plugin	eq	0.5.4