CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2022/07/27 3:15 p.m.•25 views

CVE-2022-36908

A cross-site request forgery CSRF vulnerability in Jenkins OpenShift Deployer Plugin 1.2.0 and earlier allows attackers to check for the existence of an attacker-specified file path on the Jenkins controller file system and to upload a SSH key file from the Jenkins controller file system to an...

6.5CVSS6.6AI score

Exploits0References2

NVD•added 2022/07/27 3:15 p.m.•38 views

CVE-2022-36908

6.5CVSS0.00479EPSS

Exploits0References2

CVE•added 2022/07/27 2:26 p.m.•90 views

CVE-2022-36908

The CVE-2022-36908 entry relates to a CSRF vulnerability in Jenkins OpenShift Deployer Plugin (versions 1.2.0 and earlier). The issue, described in multiple sources, allows an attacker to check for the existence of an attacker-specified file path on the Jenkins controller filesystem and to upload...

6.5CVSS6.4AI score0.00479EPSS

Exploits0References2Affected Software1