Lucene search

K
osvGoogleOSV:GHSA-R5M8-5MWX-CMJ8
HistoryMay 14, 2022 - 1:39 a.m.

CSRF vulnerability in Config File Provider Plugin

2022-05-1401:39:42
Google
osv.dev
5
cross-site request forgery
jenkins
config file provider
configuration file definitions

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

32.5%

A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java, FolderConfigFileAction.java that allows creating and editing configuration file definitions.

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

32.5%

Related for OSV:GHSA-R5M8-5MWX-CMJ8