org.jenkins-ci.plugins:rrod

2 results · Clear filters · Feed

• Medium 4.3
  CVE-2022-34815

  Cross-Site Request Forgery in Jenkins Request Rename Or Delete Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs.

  Jenkins Project Jenkins Request Rename Or Delete Plugin org.jenkins-ci.plugins:rrod Web / CMS Maven
  Jun 30, 2022
• Medium 4.3
  CVE-2022-34814

  Incorrect Authorization in Jenkins Request Rename Or Delete Plugin

  Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests.

  Jenkins Project Jenkins Request Rename Or Delete Plugin org.jenkins-ci.plugins:rrod Web / CMS Maven
  Jun 30, 2022