Skip to content
OpenAdvisories
High · 8.8 CVE-2020-2240 EUVD-2022-4343GHSA-jf9j-hx2j-m9xh

CSRF vulnerability in Jenkins Database Plugin

Published Sep 1, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins database Plugin Package: org.jenkins-ci.plugins:database Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins database Plugin 1.6 and earlier allows attackers to execute arbitrary SQL scripts.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins database Plugin unspecified – ≤ 1.6 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:database < 1.7 1.7 GHSA-jf9j-hx2j-m9xh

References