Not rated

CVE-2022-34780 A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allows…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins XebiaLabs XL Release Plugin 22.0	earliest → 22.0.0	No fix stated

The 3 CVEs of Jenkins XebiaLabs XL Release Plugin →

CVE-2022-34781 Missing permission checks in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allow attackers with Overall/Read… Not rated CVE-2022-34779 A missing permission check in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allows attackers with… Not rated

Do you use Jenkins XebiaLabs XL Release Plugin?

Track this CVE Watch Jenkins XebiaLabs XL Release Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-34780

Timeline

Published June 30, 2022
Last modified August 3, 2024

References

www.jenkins.io www.jenkins.io

Track this CVE

CVE-2022-34780 A cross-site request forgery (CSRF) vulnerability in Jenkins XebiaLabs XL Release Plugin 22.0.0 and earlier allows…

Description

Affected products and versions

Other CVEs of Jenkins XebiaLabs XL Release Plugin