GHSA-3rj3-qp2j-4fj2HighCVSS 7.1

Cross-Site Request Forgery in Jenkins P4 Plugin

Published
March 18, 2022
Last Modified
December 7, 2023

🔗 CVE IDs covered (1)

CVE-2021-21655 →

📋 Description

A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and password.

Jenkins P4 Plugin 1.11.5 requires POST requests for the affected HTTP endpoints.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:p4:< 1.11.5

🔗 References (4)