Skip to content
OpenAdvisories
Low · 3.5 CVE-2022-45393 EUVD-2022-7367GHSA-hw4f-g7wh-xp52

Cross-Site Request Forgery in Jenkins Delete log Plugin

Published Nov 15, 2022 · Updated Apr 30, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Delete log Plugin Package: org.jenkins-ci.plugins:delete-log-plugin Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Delete log Plugin 1.0 and earlier allows attackers to delete build logs.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Delete log Plugin unspecified – ≤ 1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:delete-log-plugin <= 1.0 — GHSA-hw4f-g7wh-xp52

Advisories 1

References