Medium · 4.3 CVE-2019-10326 EUVD-2022-4847GHSA-px35-882c-47hw

Jenkins Warnings NG Plugin cross-site request forgery vulnerability

Published May 31, 2019 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Warnings NG Plugin Package: io.jenkins.plugins:warnings-ng Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds.

Affected products

Vendor	Product	Affected	Fixed
Jenkins project	Jenkins Warnings NG Plugin	5.0.0 and earlier	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	io.jenkins.plugins:warnings-ng	< 5.1.0	5.1.0	GHSA-px35-882c-47hw

References

[oss-security] 20190531 Multiple vulnerabilities in Jenkins plugins mailing-list
108540 vdb-entry
https://jenkins.io/security/advisory/2019-05-31/#SECURITY-1391