Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-2141 EUVD-2022-5191GHSA-rjjq-63c7-8724

CSRF vulnerability in Jenkins P4 Plugin

Published Mar 9, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins P4 Plugin Package: org.jenkins-ci.plugins:p4 Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins P4 Plugin unspecified – ≤ 1.10.10 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:p4 < 1.10.11 1.10.11 GHSA-rjjq-63c7-8724

References