CVE-2022-23115

The CVE-2022-23115 entry concerns a CSRF vulnerability in the Jenkins batch task Plugin (versions 1.19 and earlier). An attacker with Overall/Read access can retrieve logs and also build or delete a batch task. This vulnerability is corroborated by multiple security advisories in the connected da...

PT-2022-15858 · Jenkins · Jenkins Batch Task Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins batch task Plugin versions 1.19 and earlier Description: The issue allows attackers with Overall/Read access to perform certain actions due to cross-site request forgery CSRF vulnerabilities. These actions include retrieving logs,...