CVE-2022-34780

A cross-site request forgery CSRF vulnerability in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2022-34780

CVE-2022-34780 applies to Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier. The vulnerability is a cross-site request forgery (CSRF) that lets an attacker, with access to a credential context, cause Jenkins to connect to an attacker‑specified HTTP server using attacker‑specified credentials...