Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-36916 EUVD-2022-6370GHSA-m485-79jq-cxx7

CSRF vulnerability in Jenkins Google Cloud Backup Plugin

Published Jul 27, 2022 · Updated Aug 3, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Google Cloud Backup Plugin Package: org.jenkins-ci.plugins:google-cloud-backup Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Google Cloud Backup Plugin 0.6 and earlier allows attackers to request a manual backup.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Google Cloud Backup Plugin unspecified – ≤ 0.6 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:google-cloud-backup <= 0.6 — GHSA-m485-79jq-cxx7

Advisories 1

References