Lucene search
GoogleOSV:GHSA-W6HW-57JQ-H7F5HistoryMay 24, 2022 - 5:17 p.m.
CSRF vulnerability in Amazon EC2 Plugin
2022-05-2417:17:14
Google
osv.dev
13
amazon ec2 plugin
csrf vulnerability
http endpoints
cross-site request forgery
security issue
version update
EPSS
0.001
Percentile
26.7%
Amazon EC2 Plugin 1.50.1 and earlier does not require POST requests in several HTTP endpoints, resulting in cross-site request forgery (CSRF) vulnerabilities. This allows an attacker to provision instances with an attacker-specified template ID.
Amazon EC2 Plugin 1.50.2 now requires POST requests for the affected HTTP endpoints.
Related
prion
prion
Cross site request forgery (csrf)
2020-05-06 13:15:00
github
github
CSRF vulnerability in Amazon EC2 Plugin
2022-05-24 17:17:14
cve
cve
CVE-2020-2186
2020-05-06 13:15:14
cvelist
cvelist
CVE-2020-2186
2020-05-06 12:45:24
nvd
nvd
CVE-2020-2186
2020-05-06 13:15:14