Skip to content
OpenAdvisories
High · 8.8 CVE-2020-2280 EUVD-2022-4890GHSA-q564-vvx8-9388

CSRF vulnerability in Jenkins warnings Plugin allows remote code execution

Published Sep 23, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Warnings Plugin Package: org.jvnet.hudson.plugins:warnings Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Warnings Plugin unspecified – ≤ 5.0.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jvnet.hudson.plugins:warnings < 5.0.2 5.0.2 GHSA-q564-vvx8-9388

References