Skip to content
Sign in
6.1 Medium

CVE-2024-2215 A cross-site request forgery (CSRF) vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build step executions.

Affected products and versions

Product Affected versions Fixed in
Jenkins docker-build-step Plugin 2.11 earliest → 2.11 No fix stated

Other CVEs of Jenkins docker-build-step Plugin

The 2 CVEs of Jenkins docker-build-step Plugin →
CVE-2024-2216 A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers… 8.8 High
Track this CVE