CoreCVE
Back

HIGH

A cross-site request forgery (CSRF) vulnerability in Jenkins Security Inspector Plugin 117.v6eecc36919c2 and earlier allows attackers to replace the generated report stored in a per-session cache and displayed to authorized users at the .../report URL with a report based on attacker-specified report generation options

Published Sep 21, 2022

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Security Inspector Plugin 117.v6eecc36919c2 and earlier allows attackers to replace the generated report stored in a per-session cache and displayed to authorized users at the .../report URL with a report based on attacker-specified report generation options.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner jenkins
Published Sep 21, 2022
Updated May 28, 2025
Reserved Sep 21, 2022
Link CVE-2022-41236

CISA Vulnrichment

Updated May 28, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-41236

Red Hat

No data

ENISA EUVD

Assigner jenkins
Published Sep 21, 2022
Updated May 28, 2025
Link EUVD-2022-6749

GitHub

Link GHSA-933X-5G7R-773Q