Lucene search
Veracode Vulnerability DatabaseVERACODE:5738HistoryJan 24, 2018 - 2:31 a.m.
Cross-site Request Forgery (CSRF)
2018-01-2402:31:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
33.0%
The Jenkins Translation plugin is vulnerable to cross-site request forgery (CSRF) attacks. POST requests don’t require a form submission to be submitted. Leveraging this, attackers can override localized strings displayed to all users when the victim is a Jenkins administrator.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hudson translation assitance plugin | le | 1.5 | |
| hudson translation assistance plugin | le | 1.10-h-1 |
Related
github
github
CSRF vulnerability in Jenkins Translation Assistance plugin
2022-05-14 03:45:49
cve
cve
CVE-2018-1000014
2018-01-23 14:29:00
nvd
nvd
CVE-2018-1000014
2018-01-23 14:29:00
prion
prion
Cross site request forgery (csrf)
2018-01-23 14:29:00
osv
osv
CSRF vulnerability in Jenkins Translation Assistance plugin
2022-05-14 03:45:49
CVE-2018-1000014
2018-01-23 14:29:00
cvelist
cvelist
CVE-2018-1000014
2018-01-23 14:00:00