CVE-2022-34789

CVSS v3.1 6.5 (Medium)

CVSS v2.0 4.3 (Medium)

EPSS 0.05 % (22^th)

Affected Products 1

Advisories 2

A cross-site request forgery (CSRF) vulnerability in Jenkins Matrix Reloaded Plugin 1.1.3 and earlier allows attackers to rebuild previous matrix builds.

Weaknesses

CWE-352: Cross-Site Request Forgery (CSRF)

CVE Status: PUBLISHED
CNA: Jenkins Project
Published Date: 2022-06-30 18:15:11
(2 years ago)
Updated Date: 2023-11-03 19:06:48
(10 months ago)

Affected Products

Jenkins

Matrix Reloaded

Configuration #1

		CPE23	From	Up To
	Jenkins Matrix Reloaded for Jenkins 1.1.3 and prior versions	cpe:2.3:a:jenkins:matrix_reloaded::::::jenkins		<= 1.1.3