GHSA-fqhm-fjjv-7q8xMediumCVSS 4.3

CSRF vulnerability in Jenkins openstack-heat Plugin

Published
July 28, 2022
Last Modified
January 29, 2023

🔗 CVE IDs covered (1)

CVE-2022-36911 →

📋 Description

openstack-heat Plugin 1.5 and earlier does not perform permission checks in methods implementing form validation.

This form validation methods do not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:openstack-heat:<= 1.5

🔗 References (4)