Lucene search
K

10 matches found

NVD
NVD
added 2022/03/29 1:15 p.m.13 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS0.00689EPSS
Exploits0References2
OSV
OSV
added 2022/03/29 1:15 p.m.16 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS6.7AI score
Exploits0References2
Prion
Prion
added 2022/03/29 1:15 p.m.11 views

Design/Logic Flaw

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

4CVSS4.4AI score0.00714EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2022/03/29 1:15 p.m.14 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

6.8CVSS8.7AI score0.00689EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/03/29 12:30 p.m.15 views

CVE-2022-28137

A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials...

5.2AI score0.00714EPSS
Exploits0References2
CVE
CVE
added 2022/03/29 12:30 p.m.125 views

CVE-2022-28137

The CVE-2022-28137 entry refers to Jenkins JiraTestResultReporter Plugin, version 165.v817928553942 and earlier, with a missing permission check that allows attackers holding Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials. Affected component: ...

4.3CVSS4.3AI score0.00714EPSS
Exploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2022/03/29 12:30 p.m.55 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.8CVSS4.7AI score0.00689EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/03/29 12:30 p.m.21 views

CVE-2022-28136

A cross-site request forgery CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.9AI score0.00689EPSS
Exploits0References2
CVE
CVE
added 2022/03/29 12:30 p.m.105 views

CVE-2022-28136

The CVE-2022-28136 case refers to a CSRF vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier. The issue allows an attacker to connect to an attacker‑specified URL using attacker‑specified credentials, describing a cross‑site request forgery that can initiate outbo...

8.8CVSS8.6AI score0.00689EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/03/29 12:0 a.m.3 views

Jenkins JiraTestResultReporter Plugin 跨站请求伪造漏洞

Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier versions are vulnerable to cross-site request forgery, which stems from a...

8.8CVSS5.4AI score0.00689EPSS
Exploits0References6
Rows per page
Query Builder