Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to connect to an attacker-specified HTTP URL using attacker-specified credentials.

Remediation

References

https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2798%20%282%29

Related Vulnerabilities

CVE-2021-31403 Vulnerability in maven package com.vaadin:vaadin-server

CVE-2020-13692 Vulnerability in maven package org.postgresql:postgresql

CVE-2023-6927 Vulnerability in maven package org.keycloak:keycloak-common

CVE-2022-45146 Vulnerability in maven package org.bouncycastle:bc-fips

CVE-2018-17193 Vulnerability in maven package org.apache.nifi:nifi-web-utils

Severity

Medium

Classification

CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Vendor Advisory