CSRF vulnerability in Jenkins OpenShift Deployer Plugin

2022-05-1301:25:43

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

JSON

A cross-site request forgery vulnerability in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers to initiate a connection to an attacker-specified server.

CPENameOperatorVersion
org.jenkins-ci.plugins:openshift-deployereq1.0.3
org.jenkins-ci.plugins:openshift-deployereq1.2.0
org.jenkins-ci.plugins:openshift-deployereq1.0.2
org.jenkins-ci.plugins:openshift-deployereq1.0.4
org.jenkins-ci.plugins:openshift-deployereq1.1.0
org.jenkins-ci.plugins:openshift-deployereq1.0.1
org.jenkins-ci.plugins:openshift-deployereq1.1.1

Name	Operator	Version
org.jenkins-ci.plugins:openshift-deployer	eq	1.0.3
org.jenkins-ci.plugins:openshift-deployer	eq	1.2.0
org.jenkins-ci.plugins:openshift-deployer	eq	1.0.2
org.jenkins-ci.plugins:openshift-deployer	eq	1.0.4
org.jenkins-ci.plugins:openshift-deployer	eq	1.1.0
org.jenkins-ci.plugins:openshift-deployer	eq	1.0.1
org.jenkins-ci.plugins:openshift-deployer	eq	1.1.1