Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-21641 EUVD-2022-2568GHSA-5cxw-8v65-76vf

CSRF vulnerability in Jenkins promoted builds Plugin

Published Apr 7, 2021 · Updated Oct 15, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins promoted builds Plugin Package: org.jenkins-ci.plugins:promoted-builds Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins promoted builds Plugin unspecified – ≤ 3.9 3.5.1

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:promoted-builds < 3.9.1 3.9.1 GHSA-5cxw-8v65-76vf

References