CSRF vulnerability in Jenkins Publish Over FTP Plugin

2022-04-1300:00:16

Google

osv.dev

0.001 Low

EPSS

Percentile

32.5%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over FTP Plugin 1.16 and earlier allows attackers to connect to an FTP server using attacker-specified credentials.

CPENameOperatorVersion
org.jenkins-ci.plugins:publish-over-ftpeq1.0
org.jenkins-ci.plugins:publish-over-ftpeq0.8
org.jenkins-ci.plugins:publish-over-ftpeq1.13
org.jenkins-ci.plugins:publish-over-ftpeq1.4
org.jenkins-ci.plugins:publish-over-ftpeq1.11
org.jenkins-ci.plugins:publish-over-ftpeq1.15
org.jenkins-ci.plugins:publish-over-ftpeq1.1
org.jenkins-ci.plugins:publish-over-ftpeq1.12
org.jenkins-ci.plugins:publish-over-ftpeq1.6
org.jenkins-ci.plugins:publish-over-ftpeq1.16

Name	Operator	Version
org.jenkins-ci.plugins:publish-over-ftp	eq	1.0
org.jenkins-ci.plugins:publish-over-ftp	eq	0.8
org.jenkins-ci.plugins:publish-over-ftp	eq	1.13
org.jenkins-ci.plugins:publish-over-ftp	eq	1.4
org.jenkins-ci.plugins:publish-over-ftp	eq	1.11
org.jenkins-ci.plugins:publish-over-ftp	eq	1.15
org.jenkins-ci.plugins:publish-over-ftp	eq	1.1
org.jenkins-ci.plugins:publish-over-ftp	eq	1.12
org.jenkins-ci.plugins:publish-over-ftp	eq	1.6
org.jenkins-ci.plugins:publish-over-ftp	eq	1.16