GHSA-QQ85-8G89-R5RC Cross-Site Request Forgery in Jenkins Request Rename Or Delete Plugin

A cross-site request forgery CSRF vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs...

Cross site request forgery (csrf)

Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests...

CVE-2022-34815

CVE-2022-34815 describes a CSRF vulnerability in the Jenkins Request Rename Or Delete Plugin (versions 1.1.0 and earlier). The issue allows an attacker with the ability to induce a user to perform an action to accept a pending request, resulting in jobs being renamed or deleted. The available doc...