Lucene search
GoogleOSV:GHSA-XFJQ-5M4W-CC6HHistoryJun 24, 2022 - 12:00 a.m.
Jenkins Beaker builder Plugin Missing Authorization vulnerability
2022-06-2400:00:32
Google
osv.dev
4
Jenkins Beaker builder Plugin 1.10 and earlier does not perform a permission check in a method implementing form validation.
This allows attackers with Overall/Read permission to connect to an attacker-specified URL.
Additionally, this form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.
As of publication of this advisory, there is no fix.
Related
nvd
nvd
CVE-2022-34208
2022-06-23 17:15:17
cve
cve
CVE-2022-34208
2022-06-23 17:15:17
prion
prion
Information disclosure
2022-06-23 17:15:00
cvelist
cvelist
CVE-2022-34208
2022-06-22 14:41:50
github
github
Jenkins Beaker builder Plugin Missing Authorization vulnerability
2022-06-24 00:00:32
nessus
nessus
Jenkins Enterprise and Operations Center 2.303.x < 2.303.30.0.14 / 2.332.4.1 / 2.346.1.4 Multiple Vulnerabilities (CloudBees Security Advisory 2022-06-22)
2022-07-05 00:00:00
Jenkins LTS < 2.332.4 / Jenkins weekly < 2.356 Multiple Vulnerabilities
2022-07-15 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-06-22)
2022-07-15 00:00:00