Lucene search

K
osvGoogleOSV:GHSA-7C3V-2JJV-HQ3C
HistoryMay 18, 2022 - 12:00 a.m.

Cross-Site Request Forgery in Jenkins Autocomplete Parameter Plugin

2022-05-1800:00:42
Google
osv.dev
19
jenkins
autocomplete
parameter
plugin
csrf
vulnerability
arbitrary code
sandbox protection
administrator

EPSS

0.001

Percentile

36.3%

A cross-site request forgery (CSRF) vulnerability in Jenkins Autocomplete Parameter Plugin 1.1 and earlier allows attackers to execute arbitrary code without sandbox protection if the victim is an administrator.

EPSS

0.001

Percentile

36.3%

Related for OSV:GHSA-7C3V-2JJV-HQ3C