CVE-2022-23115

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

EUVD-2020-5673

Malware in sbrugna...

EUVD-2022-0649

Malicious code in bioql PyPI...

org.jvnet.hudson.main:hudson-test-harness (1.341), org.jvnet.hudson.main:hudson-war (1.341) +9 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.341)

org.jvnet.hudson.main:hudson-core MAVEN version 1.341 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.341 - org.jvnet.hudson.main:hudson-war 1.341 -...

org.jvnet.hudson.main:hudson-war (1.146), org.jvnet.hudson.plugins:batch-task (1.0) +2 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.146)

org.jvnet.hudson.main:hudson-core MAVEN version 1.146 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.146 - org.jvnet.hudson.plugins:batch-task 1.0 -...

org.jvnet.hudson.main:hudson-test-harness (1.278), org.jvnet.hudson.main:hudson-war (1.278) +3 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.278)

org.jvnet.hudson.main:hudson-core MAVEN version 1.278 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.278 - org.jvnet.hudson.main:hudson-war 1.278 -...

org.jvnet.hudson.main:hudson-war (1.151), org.jvnet.hudson.plugins:batch-task (1.1) +2 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.151)

org.jvnet.hudson.main:hudson-core MAVEN version 1.151 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.151 - org.jvnet.hudson.plugins:batch-task 1.1 -...

org.jvnet.hudson.main:hudson-war (1.156), org.jvnet.hudson.plugins:batch-task (1.2) +3 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.156)

org.jvnet.hudson.main:hudson-core MAVEN version 1.156 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.156 - org.jvnet.hudson.plugins:batch-task 1.2 -...

no.twingine.hudson:greenballs (>=1.1, <=1.2), org.jvnet.hudson.main:hudson-test-harness (1.287) +9 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.287)

org.jvnet.hudson.main:hudson-core MAVEN version 1.287 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - no.twingine.hudson:greenballs =1.1, =1.3, =1.0, =1.2, =1.3 - org.jvnet.hudson.plugins:plugin...

Jenkins batch task Plugin cross-site request forgery vulnerability

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins batch task Plugin 1.19 and earlier versions are vulnerable to cross-site request forgery. An attacker with...

CSRF vulnerability in Jenkins batch task Plugin

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

GHSA-MH8G-8JWP-Q6XW CSRF vulnerability in Jenkins batch task Plugin

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

CVE-2022-23115

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

CVE-2022-23115

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

CVE-2022-23115

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

CVE-2022-23115

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

CVE-2022-23115

Cross-site request forgery CSRF vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task...

CVE-2022-23115

The CVE-2022-23115 entry concerns a CSRF vulnerability in the Jenkins batch task Plugin (versions 1.19 and earlier). An attacker with Overall/Read access can retrieve logs and also build or delete a batch task. This vulnerability is corroborated by multiple security advisories in the connected da...

CSRF vulnerability in batch task

batch task 1.19 and earlier does not require POST requests for several HTTP endpoints, resulting in cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow attackers with Overall/Read access to retrieve logs, build or delete a batch task. As of publication of this advisory,...