CVE-2022-23115

CVSS v3.1 5.4 (Medium)

CVSS v2.0 5.8 (Medium)

EPSS 0.10 % (43^th)

Affected Products 1

Advisories 2

Cross-site request forgery (CSRF) vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task.

Weaknesses

CWE-352: Cross-Site Request Forgery (CSRF)

CVE Status: PUBLISHED
CNA: Jenkins Project
Published Date: 2022-01-12 20:15:09
(2 years ago)
Updated Date: 2023-11-30 18:42:19
(9 months ago)

Affected Products

Jenkins

Batch Task

Configuration #1

		CPE23	From	Up To
	Jenkins Batch Task for Jenkins 1.19 and prior versions	cpe:2.3:a:jenkins:batch_task::::::jenkins		<= 1.19