CSRF vulnerability in jenkins-reviewbot Plugin

2022-05-1301:31:33

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

JSON

A cross-site request forgery vulnerability in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.

CPENameOperatorVersion
org.jenkins-ci.plugins:jenkins-reviewboteq2.1.2
org.jenkins-ci.plugins:jenkins-reviewboteq1.4.1
org.jenkins-ci.plugins:jenkins-reviewboteq1.2
org.jenkins-ci.plugins:jenkins-reviewboteq2.2.1
org.jenkins-ci.plugins:jenkins-reviewboteq1.4
org.jenkins-ci.plugins:jenkins-reviewboteq2.1.1
org.jenkins-ci.plugins:jenkins-reviewboteq2.3
org.jenkins-ci.plugins:jenkins-reviewboteq2.2
org.jenkins-ci.plugins:jenkins-reviewboteq2.0
org.jenkins-ci.plugins:jenkins-reviewboteq2.4.6

Name	Operator	Version
org.jenkins-ci.plugins:jenkins-reviewbot	eq	2.1.2
org.jenkins-ci.plugins:jenkins-reviewbot	eq	1.4.1
org.jenkins-ci.plugins:jenkins-reviewbot	eq	1.2
org.jenkins-ci.plugins:jenkins-reviewbot	eq	2.2.1
org.jenkins-ci.plugins:jenkins-reviewbot	eq	1.4
org.jenkins-ci.plugins:jenkins-reviewbot	eq	2.1.1
org.jenkins-ci.plugins:jenkins-reviewbot	eq	2.3
org.jenkins-ci.plugins:jenkins-reviewbot	eq	2.2
org.jenkins-ci.plugins:jenkins-reviewbot	eq	2.0
org.jenkins-ci.plugins:jenkins-reviewbot	eq	2.4.6