Cross-Site Request Forgery in Jenkins Failed Job Deactivator Plugin

A cross-site request forgery CSRF vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs. This CSRF vulnerability is only exploitable in Jenkins 2.286 and earlier, LTS 2.277.1 and earlier. See the LTS upgrade guide...

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier allows attackers to disable jobs...

CVE-2022-34818

The CVE-2022-34818 entry concerns Jenkins Failed Job Deactivator Plugin (versions

CVE-2022-34818

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs...

CVE-2022-34817

CVE-2022-34817 describes a CSRF vulnerability in the Jenkins Failed Job Deactivator Plugin, affecting version 1.2.1 and earlier. The vulnerability allows an attacker to disable jobs in Jenkins via a crafted request. The issue is noted across multiple sources (NVD entry for CVE-2022-34817 and PT S...