CESS-2022-30946 — Vulnetix

CESS-2022-30946 PUBLISHED CVSS 4.3 MEDIUM

A cross-site request forgery (CSRF) vulnerability in Jenkins Script Security Plugin 1158.v7c1b_73a_69a_08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver.

Risk Scores

CVSS 3.1

4.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Timeline

May 17, 2022 CVE Published

Open in Interactive Console →