2 matches found
PT-2023-27394 · Jenkins · Jenkins Folders Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Folders Plugin versions 6.846.v23698686f0f6 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to copy folders, potentially leading to the automatic approval of unsandboxed scripts and the...
PT-2022-18836 · Jenkins · Jenkins Rocketchat Notifier Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins RocketChat Notifier Plugin versions 1.4.10 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to an attacker-specified URL using attacker-specified credentials. This issue arises becau...