Lucene search

K
osvGoogleOSV:GHSA-C3WF-RRHQ-RFP2
HistoryMay 24, 2022 - 5:03 p.m.

Cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin

2022-05-2417:03:47
Google
osv.dev
9
cross-site request forgery
jenkins
websphere
deployer plugin
vulnerability
connection test
file system

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

33.0%

A cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers to perform connection tests and determine whether files with an attacker-specified path exist on the Jenkins master file system.

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

33.0%

Related for OSV:GHSA-C3WF-RRHQ-RFP2