13406 matches found
CVE-2022-34814
Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests...
CVE-2022-34815
A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...
CVE-2022-34814
Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests...
CVE-2022-34815
A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...
CVE-2022-34813
A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to create and delete XPath expressions...
CVE-2022-34815
A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...
Cross site request forgery (csrf)
A cross-site request forgery CSRF vulnerability in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers to create and delete XPath expressions...
Cross site request forgery (csrf)
A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...
Cross site request forgery (csrf)
Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests...
CVE-2022-34815
CVE-2022-34815 describes a CSRF vulnerability in the Jenkins Request Rename Or Delete Plugin (versions 1.1.0 and earlier). The issue allows an attacker with the ability to induce a user to perform an action to accept a pending request, resulting in jobs being renamed or deleted. The available doc...
CVE-2022-34814
CVE-2022-34814 affects Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier. The vulnerability arises from a missing permission check in an HTTP endpoint, enabling attackers with Overall/Read permission to view an administrative configuration page that lists pending requests. The Connected d...
CVE-2022-34813
A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to create and delete XPath expressions...
PT-2022-22366 · Jenkins · Jenkins Request Rename/Delete Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Request Rename Or Delete Plugin versions 1.1.0 and earlier Description: The issue arises from an incorrect permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration...
Jenkins Plugin Request Rename Or Delete 跨站请求伪造漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site request forgery vulnerability...
Jenkins Plugin Request Rename Or Delete 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An authorization issue vulnerability exist...
PT-2022-22367 · Jenkins · Jenkins Request Rename/Delete Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Request Rename Or Delete Plugin version 1.1.0 and earlier Description: A cross-site request forgery issue allows attackers to accept pending requests, which can lead to renaming or deleting jobs. Recommendations: For Jenkins Request...
CVE-2022-33061
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteservice...
CVE-2022-33061
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteservice...