Lucene search
+L

8 matches found

OSV
OSV
•added 2022/07/01 12:01 a.m.•41 views

GHSA-QQ85-8G89-R5RC Cross-Site Request Forgery in Jenkins Request Rename Or Delete Plugin

A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...

4.3CVSS4.9AI score0.00478EPSS
SaveExploits0References3
Prion
Prion
•added 2022/06/30 6:15 p.m.•27 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...

4.3CVSS4.6AI score0.00478EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/06/30 6:15 p.m.•27 views

Cross site request forgery (csrf)

Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests...

4CVSS4.4AI score0.0059EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/06/30 5:49 p.m.•283 views

CVE-2022-34815

CVE-2022-34815 describes a CSRF vulnerability in the Jenkins Request Rename Or Delete Plugin (versions 1.1.0 and earlier). The issue allows an attacker with the ability to induce a user to perform an action to accept a pending request, resulting in jobs being renamed or deleted. The available doc...

4.3CVSS4.9AI score0.00478EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2022/06/30 5:49 p.m.•2 views

CVE-2022-34815

A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...

5.3CVSS0.00478EPSS
SaveExploits0References3
Mend
Mend
•added 2022/06/30 5:49 p.m.•2 views

CVE-2022-34814

Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests...

5.3CVSS0.0059EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/30 12:00 a.m.•4 views

CVE-2022-34815: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...

4.3CVSS5.5AI score0.00478EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/06/30 12:00 a.m.•8 views

PT-2022-22367 · Jenkins · Jenkins Request Rename/Delete Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Request Rename Or Delete Plugin version 1.1.0 and earlier Description: A cross-site request forgery issue allows attackers to accept pending requests, which can lead to renaming or deleting jobs. Recommendations: For Jenkins Request...

4.3CVSS4.5AI score0.00478EPSS
SaveExploits0References4
Rows per page
Query Builder