Cross-site request forgery vulnerability in Jenkins BearyChat Plugin

2023-01-2621:30:17

Google

osv.dev

0.001 Low

EPSS

Percentile

27.0%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers to connect to an attacker-specified URL.

CPENameOperatorVersion
org.jenkins-ci.plugins:bearychateq1.4
org.jenkins-ci.plugins:bearychateq3.0.1
org.jenkins-ci.plugins:bearychateq1.0
org.jenkins-ci.plugins:bearychateq1.2
org.jenkins-ci.plugins:bearychateq3.0-SHAPSHOT
org.jenkins-ci.plugins:bearychateq2.1
org.jenkins-ci.plugins:bearychateq2.0
org.jenkins-ci.plugins:bearychateq3.0.2
org.jenkins-ci.plugins:bearychateq2.2
org.jenkins-ci.plugins:bearychateq1.3

Name	Operator	Version
org.jenkins-ci.plugins:bearychat	eq	1.4
org.jenkins-ci.plugins:bearychat	eq	3.0.1
org.jenkins-ci.plugins:bearychat	eq	1.0
org.jenkins-ci.plugins:bearychat	eq	1.2
org.jenkins-ci.plugins:bearychat	eq	3.0-SHAPSHOT
org.jenkins-ci.plugins:bearychat	eq	2.1
org.jenkins-ci.plugins:bearychat	eq	2.0
org.jenkins-ci.plugins:bearychat	eq	3.0.2
org.jenkins-ci.plugins:bearychat	eq	2.2
org.jenkins-ci.plugins:bearychat	eq	1.3