CVE-2022-34815: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...

CSRF vulnerability in rrod

rrod 1.1.0 and earlier does not require POST requests for HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to accept pending requests, thereby renaming or deleting jobs. As of publication of this advisory, there is no fix. Learn why ...

Jenkins Plugin Request Rename Or Delete 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site request forgery vulnerability...

PT-2022-22367 · Jenkins · Jenkins Request Rename/Delete Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Request Rename Or Delete Plugin version 1.1.0 and earlier Description: A cross-site request forgery issue allows attackers to accept pending requests, which can lead to renaming or deleting jobs. Recommendations: For Jenkins Request...

PT-2022-22366 · Jenkins · Jenkins Request Rename/Delete Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Request Rename Or Delete Plugin versions 1.1.0 and earlier Description: The issue arises from an incorrect permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration...

Jenkins Plugin Request Rename Or Delete 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An authorization issue vulnerability exist...

CVE-2022-34814: Incorrect Authorization

Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests...

PT-2022-30805

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description The issue concerns the kernfs component, specifically the separation of kernfs pr cont buf and rename lock. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-31935

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to kernfs, where kernfs pr cont buf and rename lock are separated. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32221

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a use-after-free in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-30861

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a use-after-free in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-32107

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a use-after-free in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-31198

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A use-after-free issue was discovered in the ext4 file system, specifically in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven...

PT-2022-32310

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description A use-after-free issue was discovered in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31504

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a use-after-free in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31956

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A use-after-free issue was discovered in the ext4 file system, specifically in the ext4 rename dir prepare function. The actual impact and attack plausibility of this issue have not yet been...

PT-2022-31731

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.122 Description The issue is related to kernfs, where kernfs pr cont buf and rename lock are not properly separated. This is an automated identification of a potential security issue, but the actual impact...

PT-2022-32084

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to kernfs, where kernfs pr cont buf and rename lock are separated. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32197

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to kernfs, where kernfs pr cont buf and rename lock are not properly separated. This is an automated identification of a potential security issue, but the actual impact...

PT-2022-31468

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description The issue is related to kernfs, where kernfs pr cont buf and rename lock are separated. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...