CVE-2022-27204

A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers to connect to an attacker-specified URL...

CVE-2022-27204

CVE-2022-27204 affects the Jenkins Extended Choice Parameter Plugin (346.vd87693c5a_86c and earlier). The vulnerability is a cross-site request forgery (CSRF) flaw caused by missing permission checks on form validation methods, allowing attackers with Overall/Read permission to connect to an atta...