Lucene search
GoogleOSV:GHSA-FQHM-FJJV-7Q8XHistoryJul 28, 2022 - 12:00 a.m.
CSRF vulnerability in Jenkins openstack-heat Plugin
2022-07-2800:00:42
Google
osv.dev
11
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
35.3%
openstack-heat Plugin 1.5 and earlier does not perform permission checks in methods implementing form validation.
This form validation methods do not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.
Related
cve
cve
CVE-2022-36911
2022-07-27 15:15:10
github
github
CSRF vulnerability in Jenkins openstack-heat Plugin
2022-07-28 00:00:42
cvelist
cvelist
CVE-2022-36911
2022-07-27 14:27:06
prion
prion
Cross site request forgery (csrf)
2022-07-27 15:15:00
nvd
nvd
CVE-2022-36911
2022-07-27 15:15:10
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
35.3%
Related for OSV:GHSA-FQHM-FJJV-7Q8X