Skip to content
OpenAdvisories
Low · 3.1 CVE-2020-2186 EUVD-2022-5512GHSA-w6hw-57jq-h7f5

CSRF vulnerability in Amazon EC2 Plugin

Published May 6, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Amazon EC2 Plugin Package: org.jenkins-ci.plugins:ec2 Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Amazon EC2 Plugin unspecified – ≤ 1.50.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:ec2 < 1.50.2 1.50.2 GHSA-w6hw-57jq-h7f5

References