Description

A cross-site request forgery (CSRF) vulnerability in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password.

Remediation

References

https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2800

Related Vulnerabilities

CVE-2012-0022 Vulnerability in maven package org.apache.tomcat:tomcat-util

CVE-2018-16131 Vulnerability in maven package com.typesafe.akka:akka-http-core_2.11

CVE-2018-1275 Vulnerability in maven package org.springframework:spring-messaging

CVE-2017-15010 Vulnerability in maven package org.webjars.npm:tough-cookie

CVE-2017-16047 Vulnerability in npm package mysqljs

Severity

Critical

Classification

CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Vendor Advisory