Skip to content
OpenAdvisories
High · 8.8 CVE-2021-21617 EUVD-2022-2272GHSA-42mm-x828-56c7

CSRF vulnerability in Jenkins Configuration Slicing Plugin

Published Feb 24, 2021 · Updated Aug 3, 2024 · Assigned by jenkins

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Configuration Slicing Plugin 1.51 and earlier allows attackers to apply different slice configurations.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Configuration Slicing Plugin unspecified – ≤ 1.51 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:configurationslicing < 1.52 1.52 GHSA-42mm-x828-56c7

References