Aller au contenu
Se connecter
8.0 Élevée

CVE-2022-41232 A cross-site request forgery (CSRF) vulnerability in Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers to…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers to replace any config.xml file on the Jenkins controller file system with an empty file by providing a crafted file name to an API endpoint.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Build-Publisher Plugin 1.22 premières → 1.22 Pas de correctif indiqué

Autres CVE de Jenkins Build-Publisher Plugin

Les 3 CVE de Jenkins Build-Publisher Plugin →
CVE-2022-41230 Jenkins Build-Publisher Plugin 1.22 and earlier does not perform a permission check in an HTTP endpoint, allowing… 4.3 Moyenne CVE-2022-41231 Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any… 5.7 Moyenne
Suivre cette CVE