Lucene search
GitHub Advisory DatabaseGHSA-64C5-R2H5-C2FGHistoryMar 06, 2024 - 6:30 p.m.
Jenkins docker-build-step Plugin Cross-Site Request Forgery vulnerability
2024-03-0618:30:39
CWE-352
GitHub Advisory Database
github.com
10
jenkins
docker-build-step
plugin
csrf
vulnerability
attackers
socket url
connection test parameters
build step executions
A cross-site request forgery (CSRF) vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build step executions.
Affected configurations
Node
jenkinspipeline\Match_build_stepjenkins
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:docker-build-step | le | 2.11 |
Related
osv
osv
Jenkins docker-build-step Plugin Cross-Site Request Forgery vulnerability
2024-03-06 18:30:39
cvelist
cvelist
CVE-2024-2215
2024-03-06 17:01:52
veracode
veracode
Cross Site Request Forgery (CSRF)
2024-03-12 06:32:11
cve
cve
CVE-2024-2215
2024-03-06 17:15:11
nvd
nvd
CVE-2024-2215
2024-03-06 17:15:11
prion
prion
Cross site request forgery (csrf)
2024-03-06 17:15:00
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2024-03-06)
2024-03-07 00:00:00