Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Lockable Resources Plugin 2.8 and earlier allows attackers to reserve, unreserve, unlock, and reset resources.

Remediation

References

http://www.openwall.com/lists/oss-security/2020/09/23/1

https://www.jenkins.io/security/advisory/2020-09-23/#SECURITY-1958

Related Vulnerabilities

CVE-2019-10357 Vulnerability in maven package org.jenkins-ci.plugins.workflow:workflow-cps-global-lib

CVE-2023-31206 Vulnerability in maven package org.apache.inlong:manager-pojo

CVE-2022-45396 Vulnerability in maven package com.thalesgroup.hudson.plugins:sourcemonitor

CVE-2019-0221 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

CVE-2022-36077 Vulnerability in maven package org.webjars.npm:electron

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Tags

Mailing List Third Party Advisory Vendor Advisory CWE-352