CVE-2022-34205 - A cross-site request forgery (CSRF) vulnerability in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers to send HTTP POST requests to an attacker-specified URL

Back Back to CVE browser

MEDIUM

A cross-site request forgery (CSRF) vulnerability in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers to send HTTP POST requests to an attacker-specified URL

Published Jun 22, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 0.49%

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers to send HTTP POST requests to an attacker-specified URL.

Affected products

Vendor Jenkins project Product Jenkins Jianliao Notification Plugin Default
unknown
Affected
- ≥ unspecified, ≤ 1.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Jenkins project	Jenkins Jianliao Notification Plugin	unknown	Affected ≥ unspecified, ≤ 1.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6130
Advisory
https://github.com/advisories/GHSA-q8v3-7h6q-g39q
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-34205
https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2240
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-6130		Advisory
https://github.com/advisories/GHSA-q8v3-7h6q-g39q		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-34205
https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2240		x_refsource_CONFIRMVendor Advisory