Lucene search
Veracode Vulnerability DatabaseVERACODE:39565HistoryMar 07, 2023 - 12:49 a.m.
Cross-Site Request Forgery (CSRF)
2023-03-0700:49:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
cross-site request forgery
jenkins 2
csrf vulnerability
git repository
trigger builds
vulnerable software
jenkins-2-plugins is vulnerable to Cross-Site Request Forgery (CSRF). An attacker is able to trigger builds of jobs configured to use an attacker-specified Git repository and cause them to check out an attacker-specified commit.
References
www.openwall.com/lists/oss-security/2022/07/27/1
access.redhat.com/errata/RHSA-2023:0777
access.redhat.com/security/updates/classification/#critical
bugzilla.redhat.com/show_bug.cgi?id=2116840
docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html
www.jenkins.io/security/advisory/2022-07-27/#SECURITY-284
Related
alpinelinux
alpinelinux
CVE-2022-36882
2022-07-27 15:15:08
nvd
nvd
CVE-2022-36882
2022-07-27 15:15:08
redhatcve
redhatcve
CVE-2022-36882
2022-08-09 12:07:43
osv
osv
Lack of authentication mechanism in Jenkins Git Plugin webhook
2022-07-28 00:00:43
CVE-2022-36882
2022-07-27 15:15:08
prion
prion
Cross site request forgery (csrf)
2022-07-27 15:15:00
cvelist
cvelist
CVE-2022-36882
2022-07-27 14:20:59
github
github
Lack of authentication mechanism in Jenkins Git Plugin webhook
2022-07-28 00:00:43
cve
cve
CVE-2022-36882
2022-07-27 15:15:08
nessus
nessus
RHEL 8 : OpenShift Container Platform 4.8.56 (RHSA-2023:0017)
2024-04-28 00:00:00
RHCOS 4 : OpenShift Container Platform 4.8.56 (RHSA-2023:0017)
2024-01-24 00:00:00
RHEL 8 : OpenShift Container Platform 4.10.51 (RHSA-2023:0560)
2024-04-28 00:00:00
redhat
redhat