Lucene search
+L

8297 matches found

osv_cve
osv_cve
•added 2022/01/12 8:15 p.m.•33 views

CVE-2022-23115

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

5.4CVSS5.7AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2022/01/12 8:15 p.m.•17 views

CVE-2022-23115

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

5.8CVSS5.8AI score0.00579EPSS
SaveExploits0References3
NVD
NVD
•added 2022/01/12 8:15 p.m.•40 views

CVE-2022-23115

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

5.8CVSS0.00579EPSS
SaveExploits0References2
Prion
Prion
•added 2022/01/12 8:15 p.m.•29 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

5.8CVSS5.6AI score0.00579EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2022/01/12 7:06 p.m.•2 views

CVE-2022-23115

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

5.8CVSS0.00579EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2022/01/12 7:06 p.m.•60 views

CVE-2022-23115

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

7.5AI score0.00579EPSS
SaveExploits0References2
CVE
CVE
•added 2022/01/12 7:06 p.m.•137 views

CVE-2022-23115

The CVE-2022-23115 entry concerns a CSRF vulnerability in the Jenkins batch task Plugin (versions 1.19 and earlier). An attacker with Overall/Read access can retrieve logs and also build or delete a batch task. This vulnerability is corroborated by multiple security advisories in the connected da...

5.8CVSS5.6AI score0.00579EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/01/12 12:00 a.m.•12 views

PT-2022-15858 · Jenkins · Jenkins Batch Task Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins batch task Plugin versions 1.19 and earlier Description: The issue allows attackers with Overall/Read access to perform certain actions due to cross-site request forgery CSRF vulnerabilities. These actions include retrieving logs,...

5.8CVSS5.4AI score0.00579EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2022/01/12 12:00 a.m.•16 views

Jenkins Plugin 跨站请求伪造漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins batch task Plugin 1.19 and earlier versions are vulnerable to cross-site request forgery. An attacker with...

5.8CVSS5.4AI score0.00579EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/12 12:00 a.m.•4 views

CVE-2022-23115: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

5.8CVSS5.8AI score0.00579EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/01/12 12:00 a.m.•15 views

CSRF vulnerability in batch task

batch task 1.19 and earlier does not require POST requests for several HTTP endpoints, resulting in cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow attackers with Overall/Read access to retrieve logs, build or delete a batch task. As of publication of this advisory,...

5.8CVSS5.6AI score0.00579EPSS
SaveExploits0Affected Software1
osv_cve
osv_cve
•added 2022/01/11 9:15 p.m.•12 views

CVE-2022-21861

Task Flow Data Engine Elevation of Privilege Vulnerability...

7.8CVSS7.2AI score0.0066EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/01/11 9:15 p.m.•12 views

CVE-2022-21861

Task Flow Data Engine Elevation of Privilege Vulnerability...

7.8CVSS7.2AI score0.0066EPSS
SaveExploits0References3Affected Software10
NVD
NVD
•added 2022/01/11 9:15 p.m.•32 views

CVE-2022-21861

Task Flow Data Engine Elevation of Privilege Vulnerability...

7.8CVSS0.0066EPSS
SaveExploits0References2
Prion
Prion
•added 2022/01/11 9:15 p.m.•32 views

Privilege escalation

Task Flow Data Engine Elevation of Privilege Vulnerability...

7.2CVSS8.5AI score0.0066EPSS
SaveExploits0References1Affected Software2
CVE
CVE
•added 2022/01/11 8:22 p.m.•139 views

CVE-2022-21861

Technical details about CVE-2022-21861 are not provided in the connected documents; publicly available content in the initial entry is limited to a high-level description and scores. Monitor for updates.

7.8CVSS8.1AI score0.0066EPSS
SaveExploits0References2Affected Software4
Cvelist
Cvelist
•added 2022/01/11 8:22 p.m.•74 views

CVE-2022-21861 Task Flow Data Engine Elevation of Privilege Vulnerability

...

7CVSS8.8AI score0.0066EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/01/11 12:15 p.m.•17 views

CVE-2021-37195

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS accepts arbitrary code as...

6.1CVSS5.9AI score0.00509EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/01/11 12:15 p.m.•10 views

CVE-2021-37195

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS accepts arbitrary code as...

6.1CVSS6.5AI score0.00509EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2022/01/11 8:00 a.m.•54 views

Task Flow Data Engine Elevation of Privilege Vulnerability

...

7.8CVSS8.3AI score0.0066EPSS
SaveExploits0
Rows per page
Query Builder