QwikSec

Security Database

CVE

CWE

Training

CVE-2022-36887

Published: Jul 27, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Job Configuration History Plugin 1155.v28a_46a_cc06a_5 and earlier allows attackers to delete entries from job, agent, and system configuration history, or restore older versions of job, agent, and system configurations.

Vendor	Product	Versions
Jenkins project	Jenkins Job Configuration History Plugin	affected `unspecified - <= 1155.v28a_46a_cc06a_5`

References

https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2766

x_refsource_CONFIRM

[oss-security] 20220727 Multiple vulnerabilities in Jenkins plugins

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.