CVE-2022-34209

CVE-2022-34209 is a CSRF vulnerability affecting Jenkins ThreadFix Plugin 1.5.4 and earlier. The issue allows an attacker to coax the server into connecting to an attacker-specified URL via a CSRF request. The connected documents corroborate the CVE ID and describe the vulnerability in the Thread...

CVE-2022-34209

A cross-site request forgery CSRF vulnerability in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers to connect to an attacker-specified URL...

PT-2022-22079 · Jenkins · Jenkins Threadfix Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins ThreadFix Plugin versions 1.5.4 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to an attacker-specified URL. Recommendations: For Jenkins ThreadFix Plugin versions 1.5.4 and earlie...

Jenkins Plugin ThreadFix 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is an application software. An authorization issue...

Jenkins Plugin ThreadFix 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site request...

PT-2022-22081 · Jenkins · Jenkins Threadfix Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins ThreadFix Plugin versions 1.5.4 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL. Recommendations: For Jenkins ThreadFix Plugin...