8.8 High

CVE-2022-28136 A cross-site request forgery (CSRF) vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins JiraTestResultReporter Plugin 165	earliest → 165.v817928553942	No fix stated

The 2 CVEs of Jenkins JiraTestResultReporter Plugin →

CVE-2022-28137 A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers… Not rated

Do you use Jenkins JiraTestResultReporter Plugin?

Track this CVE Watch Jenkins JiraTestResultReporter Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-28136

Timeline

Published March 29, 2022
Last modified October 15, 2024

References

www.jenkins.io www.jenkins.io
[oss-security] 20220329 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE

CVE-2022-28136 A cross-site request forgery (CSRF) vulnerability in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier…

Description

Affected products and versions

Other CVEs of Jenkins JiraTestResultReporter Plugin