Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-2296 EUVD-2022-2052GHSA-2v9x-gpq4-8gg2

CSRF vulnerability in Jenkins Shared Objects Plugin

Published Oct 8, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Shared Objects Plugin 0.44 and earlier allows attackers to configure shared objects.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Shared Objects Plugin unspecified – ≤ 0.44 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:shared-objects <= 0.44 — GHSA-2v9x-gpq4-8gg2

References