CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Github Security Blog•added 2022/05/24 5:35 p.m.•42 views

CSRF vulnerability in Jenkins Shelve Project Plugin

Jenkins Shelve Project Plugin 3.0 and earlier does not require POST requests for HTTP endpoints, resulting in cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow attackers to shelve, unshelve, or delete a project. Jenkins Shelve Project Plugin 3.1 requires POST requests f...

8.1CVSS7.9AI score0.00756EPSS

SaveExploits0References5Affected Software1

Mend•added 2020/12/03 3:55 p.m.•2 views

CVE-2020-2321

A cross-site request forgery CSRF vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project...

8.1CVSS0.00756EPSS

SaveExploits0References5

Rapid7 Vulnerability Database (full)•added 2020/12/03 12:00 a.m.•6 views

CVE-2020-2321: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project...

8.1CVSS5.7AI score0.00756EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by