Description
A cross-site request forgery (CSRF) vulnerability in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers to create and delete XPath expressions.
Remediation
References
https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2658
Related Vulnerabilities
CVE-2023-50767 Vulnerability in maven package org.sonatype.nexus.ci:nexus-jenkins-plugin
CVE-2012-5783 Vulnerability in maven package commons-httpclient:commons-httpclient
CVE-2019-10422 Vulnerability in maven package org.ukiuni.callotherjenkins:call-remote-job-plugin
CVE-2023-31125 Vulnerability in npm package engine.io
CVE-2019-3773 Vulnerability in maven package org.springframework.ws:spring-ws-core