GHSA-j2h6-j34w-g5vpHighCVSS 8.8

CSRF vulnerability in Jenkins Release plugin

Published
May 14, 2022
Last Modified
January 30, 2024

🔗 CVE IDs covered (1)

CVE-2018-1000013 →

📋 Description

Jenkins Release Plugin 2.9 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to trigger release builds.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:release:< 2.10

🔗 References (4)