Lucene search
Veracode Vulnerability DatabaseVERACODE:39563HistoryMar 07, 2023 - 12:48 a.m.
Cross-Site Request Forgery (CSRF)
2023-03-0700:48:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
cross-site request forgery
jenkins
vulnerability
http server
get requests
jenkins-2-plugins is vulnerable to Cross-Site Request Forgery (CSRF). An attacker is able to connect to an attacker-specified HTTP server using GET requests resulting in cross-site request forgery vulnerability.
References
www.openwall.com/lists/oss-security/2022/05/17/8
access.redhat.com/errata/RHSA-2023:0777
access.redhat.com/security/updates/classification/#critical
bugzilla.redhat.com/show_bug.cgi?id=2119646
docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html
www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2502
Related
osv
osv
CVE-2022-30953
2022-05-17 15:15:09
Cross Site Request Forgery in Jenkins Blue Ocean Plugin
2022-05-18 00:00:40
cvelist
cvelist
CVE-2022-30953
2022-05-17 14:06:18
prion
prion
Cross site request forgery (csrf)
2022-05-17 15:15:00
nvd
nvd
CVE-2022-30953
2022-05-17 15:15:09
redhatcve
redhatcve
CVE-2022-30953
2022-08-19 04:38:43
github
github
Cross Site Request Forgery in Jenkins Blue Ocean Plugin
2022-05-18 00:00:40
cve
cve
CVE-2022-30953
2022-05-17 15:15:09
redhat
redhat
nessus
nessus
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3622)
2024-04-28 00:00:00
RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3610)
2024-04-28 00:00:00
RHEL 8 : OpenShift Container Platform 4.8.56 (RHSA-2023:0017)
2024-04-28 00:00:00