Lucene search

K
osvGoogleOSV:GHSA-PWVJ-6PHX-QV8C
HistoryMay 14, 2022 - 3:45 a.m.

CSRF vulnerability in Jenkins Translation Assistance plugin

2022-05-1403:45:49
Google
osv.dev
3

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

Jenkins Translation Assistance Plugin 1.15 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to override localized strings displayed to all users on the current Jenkins instance if the victim is a Jenkins administrator.

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

Related for OSV:GHSA-PWVJ-6PHX-QV8C