Lucene search

K
osvGoogleOSV:GHSA-3RJ3-QP2J-4FJ2
HistoryMar 18, 2022 - 5:53 p.m.

Cross-Site Request Forgery in Jenkins P4 Plugin

2022-03-1817:53:10
Google
osv.dev
11
cross-site request forgery
jenkins p4 plugin
perforce server
http endpoints
software

EPSS

0.001

Percentile

29.9%

A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and password.

Jenkins P4 Plugin 1.11.5 requires POST requests for the affected HTTP endpoints.

EPSS

0.001

Percentile

29.9%

Related for OSV:GHSA-3RJ3-QP2J-4FJ2