4.3 Medium

CVE-2022-45398 A cross-site request forgery (CSRF) vulnerability in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows attackers to delete recorded Jenkins Cluster Statistics.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Cluster Statistics Plugin 0.4	earliest → 0.4.6	No fix stated

The 2 CVEs of Jenkins Cluster Statistics Plugin →

CVE-2022-45399 A missing permission check in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows attackers to delete recorded… 4.3 Medium

Do you use Jenkins Cluster Statistics Plugin?

Track this CVE Watch Jenkins Cluster Statistics Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-45398

Timeline

Published November 15, 2022
Last modified April 30, 2025

References

www.jenkins.io www.jenkins.io
[oss-security] 20221115 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE

CVE-2022-45398 A cross-site request forgery (CSRF) vulnerability in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows…

Description

Affected products and versions

Other CVEs of Jenkins Cluster Statistics Plugin