Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-2237 EUVD-2022-5368GHSA-vjf8-xw6c-wjhq

CSRF vulnerability in Jenkins Flaky Test Handler Plugin

Published Aug 12, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Flaky Test Handler Plugin unspecified – ≤ 1.0.4 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:flaky-test-handler < 1.1.0 1.1.0 GHSA-vjf8-xw6c-wjhq

References