Skip to content
fr Sign in
Not rated

CVE-2022-25205 A cross-site request forgery (CSRF) vulnerability in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers to…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers to connect to an attacker-specified database via JDBC using attacker-specified credentials and to determine if a class is available in the Jenkins instance.

Affected products and versions

Product Affected versions Fixed in
Jenkins dbCharts Plugin 0.5 earliest → 0.5.2 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Jenkins dbCharts Plugin

The 3 CVEs of Jenkins dbCharts Plugin →
CVE-2022-27216 Jenkins dbCharts Plugin 0.5.2 and earlier stores JDBC connection passwords unencrypted in its global configuration… Not rated CVE-2022-25206 A missing check in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers with Overall/Read permission to connect to… Not rated
Track this CVE