Lucene search
GoogleOSV:GHSA-7G7G-82FP-HPXXHistoryFeb 16, 2022 - 12:01 a.m.
CSRF vulnerability in Jenkins SCP publisher Plugin
2022-02-1600:01:22
Google
osv.dev
7
0.001 Low
EPSS
Percentile
32.5%
SCP publisher Plugin 1.8 and earlier does not perform a permission check in a method implementing form validation.
This allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials.
Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.
Related
prion
prion
Cross site request forgery (csrf)
2022-02-15 17:15:00
nvd
nvd
CVE-2022-25198
2022-02-15 17:15:10
cnvd
cnvd
Jenkins SCP publisher Plugin cross-site request forgery vulnerability
2022-02-17 00:00:00
github
github
CSRF vulnerability in Jenkins SCP publisher Plugin
2022-02-16 00:01:22
cve
cve
CVE-2022-25198
2022-02-15 17:15:10
cvelist
cvelist
CVE-2022-25198
2022-02-15 16:11:29
