Lucene search
PRIOn knowledge basePRION:CVE-2022-46688HistoryDec 12, 2022 - 9:15 a.m.
Cross site request forgery (csrf)
2022-12-1209:15:00
PRIOn knowledge base
www.prio-n.com
2
cross-site request forgery
jenkins sonar gerrit
vulnerability
credential capture
0.001 Low
EPSS
Percentile
30.4%
A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows attackers to have Jenkins connect to Gerrit servers (previously configured by Jenkins administrators) using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sonar_gerrit | eq | <= 377.v8f3808963dc5 |
Related
github
github
Jenkins Sonar Gerrit Plugin vulnerable to Cross-Site Request Forgery
2022-12-12 09:30:35
osv
osv
CVE-2022-46688
2022-12-12 09:15:13
Jenkins Sonar Gerrit Plugin vulnerable to Cross-Site Request Forgery
2022-12-12 09:30:35
nvd
nvd
CVE-2022-46688
2022-12-12 09:15:13
cve
cve
CVE-2022-46688
2022-12-12 09:15:13
cvelist
cvelist
CVE-2022-46688
2022-12-07 00:00:00
alpinelinux
alpinelinux
CVE-2022-46688
2022-12-12 09:15:13
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2022-12-07)
2023-07-31 00:00:00