Skip to content
OpenAdvisories
High · 8.8 CVE-2021-21627 EUVD-2022-4585GHSA-mm5c-7mpr-99fm

CSRF vulnerability in Jenkins Libvirt Agents Plugin

Published Mar 18, 2021 · Updated Aug 3, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Libvirt Agents Plugin Package: org.jenkins-ci.plugins:libvirt-slave Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Libvirt Agents Plugin unspecified – ≤ 1.9.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:libvirt-slave < 1.9.1 1.9.1 GHSA-mm5c-7mpr-99fm

References