GHSA-pwvj-6phx-qv8cHighCVSS 8.8

CSRF vulnerability in Jenkins Translation Assistance plugin

Published
May 14, 2022
Last Modified
January 30, 2024

🔗 CVE IDs covered (1)

📋 Description

Jenkins Translation Assistance Plugin 1.15 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to override localized strings displayed to all users on the current Jenkins instance if the victim is a Jenkins administrator.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:translation:<= 1.15

🔗 References (4)