CVE-2022-34210

CVE-2022-34210 — Jenkins ThreadFix Plugin : The vulnerability occurs in ThreadFix Plugin versions 1.5.4 and earlier due to a missing permission check in the form-validation path. This allows attackers with Overall/Read permission to cause the plugin to connect to an attacker-specified URL. The pu...

CVE-2022-34209

CVE-2022-34209 is a CSRF vulnerability affecting Jenkins ThreadFix Plugin 1.5.4 and earlier. The issue allows an attacker to coax the server into connecting to an attacker-specified URL via a CSRF request. The connected documents corroborate the CVE ID and describe the vulnerability in the Thread...

CVE-2022-34209

A cross-site request forgery CSRF vulnerability in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers to connect to an attacker-specified URL...

CVE-2022-34209

A cross-site request forgery CSRF vulnerability in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers to connect to an attacker-specified URL...

PT-2022-22081 · Jenkins · Jenkins Threadfix Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins ThreadFix Plugin versions 1.5.4 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL. Recommendations: For Jenkins ThreadFix Plugin...

Jenkins Plugin ThreadFix 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is an application software. An authorization issue...

CVE-2022-34210: Missing Authorization

A missing permission check in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

CVE-2022-34209: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers to connect to an attacker-specified URL...

PT-2022-22079 · Jenkins · Jenkins Threadfix Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins ThreadFix Plugin versions 1.5.4 and earlier Description: A cross-site request forgery CSRF vulnerability allows attackers to connect to an attacker-specified URL. Recommendations: For Jenkins ThreadFix Plugin versions 1.5.4 and earlie...

Jenkins Plugin ThreadFix 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A cross-site request...