Lucene search
K

7 matches found

CNVD
CNVD
added 2022/07/04 12:0 a.m.25 views

Jenkins Request Rename Or Delete Plugin跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site request forgery vulnerability...

4.3CVSS2.5AI score0.00083EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2022/07/01 12:1 a.m.20 views

Incorrect Authorization in Jenkins Request Rename Or Delete Plugin

Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests...

4.3CVSS4.9AI score0.00335EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/07/01 12:1 a.m.25 views

GHSA-QQ85-8G89-R5RC Cross-Site Request Forgery in Jenkins Request Rename Or Delete Plugin

A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...

4.3CVSS4.9AI score0.00083EPSS
Exploits0References3
Prion
Prion
added 2022/06/30 6:15 p.m.11 views

Cross site request forgery (csrf)

Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests...

4CVSS4.4AI score0.00335EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/06/30 5:49 p.m.255 views

CVE-2022-34815

CVE-2022-34815 describes a CSRF vulnerability in the Jenkins Request Rename Or Delete Plugin (versions 1.1.0 and earlier). The issue allows an attacker with the ability to induce a user to perform an action to accept a pending request, resulting in jobs being renamed or deleted. The available doc...

4.3CVSS4.9AI score0.00083EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/06/30 5:49 p.m.254 views

CVE-2022-34814

CVE-2022-34814 affects Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier. The vulnerability arises from a missing permission check in an HTTP endpoint, enabling attackers with Overall/Read permission to view an administrative configuration page that lists pending requests. The Connected d...

4.3CVSS4.8AI score0.00335EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/06/30 12:0 a.m.3 views

Jenkins Plugin Request Rename Or Delete 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An authorization issue vulnerability exist...

4.3CVSS5.6AI score0.00335EPSS
Exploits0References5
Rows per page
Query Builder