4 matches found
CVE-2022-36911
A cross-site request forgery CSRF vulnerability in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers to connect to an attacker-specified URL...
6.5CVSS6.5AI score0.00441EPSS
SaveExploits0References1
CVE-2022-36911
A cross-site request forgery CSRF vulnerability in Jenkins Openstack Heat Plugin 1.5 and earlier allows attackers to connect to an attacker-specified URL...
6.5CVSS0.00441EPSS
SaveExploits0References2
CVE-2022-36911
Consolidated details show a CSRF vulnerability in Jenkins Openstack Heat Plugin (version 1.5 and earlier). The underlying issue is lack of permission checks in methods implementing form validation, which do not require POST requests, enabling an attacker to trigger connections to an attacker-spec...
6.5CVSS6.4AI score0.00441EPSS
SaveExploits0References2Affected Software1
20