CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Github Security Blog•added 2022/05/24 5:17 p.m.•38 views

CSRF vulnerability in Amazon EC2 Plugin

Amazon EC2 Plugin 1.50.1 and earlier does not require POST requests in several HTTP endpoints, resulting in cross-site request forgery CSRF vulnerabilities. This allows an attacker to provision instances with an attacker-specified template ID. Amazon EC2 Plugin 1.50.2 now requires POST requests f...

4.3CVSS5.1AI score0.00636EPSS

SaveExploits0References5Affected Software1

NVD•added 2020/05/06 1:15 p.m.•22 views

CVE-2020-2186

A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances...

4.3CVSS4.6AI score0.00636EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2020/05/06 12:00 a.m.•4 views

CVE-2020-2186: Cross-Site Request Forgery (CSRF)

A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances...

4.3CVSS5.5AI score0.00636EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by