CVE-2022-30953

2022-05-1715:15:09

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server.

CPENameOperatorVersion
blueocean-plugineqblueocean-parent-1.0.0-rc3
blueocean-plugineqblueocean-parent-1.25.1
blueocean-plugineqblueocean-parent-1.0.0-b04
blueocean-plugineqblueocean-parent-1.1.0-beta-2
blueocean-plugineqblueocean-parent-1.1.0-beta-8
blueocean-plugineqblueocean-parent-1.0.0-b03
blueocean-plugineqblueocean-parent-1.0.0-b10
blueocean-plugineqblueocean-parent-1.5.0-beta-1
blueocean-plugineqblueocean-parent-1.0.0-b15
blueocean-plugineqblueocean-parent-1.0.0-b08

Name	Operator	Version
blueocean-plugin	eq	blueocean-parent-1.0.0-rc3
blueocean-plugin	eq	blueocean-parent-1.25.1
blueocean-plugin	eq	blueocean-parent-1.0.0-b04
blueocean-plugin	eq	blueocean-parent-1.1.0-beta-2
blueocean-plugin	eq	blueocean-parent-1.1.0-beta-8
blueocean-plugin	eq	blueocean-parent-1.0.0-b03
blueocean-plugin	eq	blueocean-parent-1.0.0-b10
blueocean-plugin	eq	blueocean-parent-1.5.0-beta-1
blueocean-plugin	eq	blueocean-parent-1.0.0-b15
blueocean-plugin	eq	blueocean-parent-1.0.0-b08