Description
A cross-site request forgery (CSRF) vulnerability in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers to connect to an attacker-specified database via JDBC using attacker-specified credentials and to determine if a class is available in the Jenkins instance.
Remediation
References
https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2177
Related Vulnerabilities
CVE-2021-39152 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2022-24815 Vulnerability in npm package generator-jhipster
CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-drill
CVE-2021-3807 Vulnerability in npm package ansi-regex
CVE-2022-23596 Vulnerability in maven package com.github.junrar:junrar