3 matches found
Cross site request forgery (csrf)
A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds...
4.3CVSS4.7AI score0.0103EPSS
SaveExploits0References3Affected Software1
CVE-2019-10326
A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds...
4.5AI score0.0103EPSS
SaveExploits0References3
CSRF vulnerability in warnings-ng
warnings-ng did not require that requests sent to the endpoint used to reset warning counts use POST. This resulted in a cross-site request forgery vulnerability that allows attackers to reset warning counts for future builds. warnings-ng now requires that these requests be sent via POST...
4.3CVSS4.9AI score0.0103EPSS
SaveExploits0Affected Software1
20