GHSA-r8rw-xx57-m64qMediumCVSS 4.3

Cross-Site Request Forgery in Jenkins Git Plugin

Published
May 14, 2022
Last Modified
December 21, 2023

🔗 CVE IDs covered (1)

CVE-2019-1003010 →

📋 Description

A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows attackers to create a Git tag in a workspace and attach corresponding metadata to a build record.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:git:<= 3.9.1

🔗 References (6)