Lucene search

K
osvGoogleOSV:GHSA-M46P-RP8X-X8C4
HistoryMay 13, 2022 - 1:25 a.m.

CSRF vulnerability in Jenkins OpenShift Deployer Plugin

2022-05-1301:25:16
Google
osv.dev
6
csrf
jenkins
openshift
vulnerability
permission check
connection

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

44.8%

A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptor#doCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

44.8%

Related for OSV:GHSA-M46P-RP8X-X8C4