GHSA-pwvj-6phx-qv8cHighCVSS 8.8
CSRF vulnerability in Jenkins Translation Assistance plugin
🔗 CVE IDs covered (1)
📋 Description
Jenkins Translation Assistance Plugin 1.15 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to override localized strings displayed to all users on the current Jenkins instance if the victim is a Jenkins administrator.
🎯 Affected products1
- maven/org.jenkins-ci.plugins:translation:<= 1.15