CVE-2022-34815

A cross-site request forgery (CSRF) vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs.

Score

CVSS 3.1 4.3 Medium

Status

Modified - jenkinsci-cert@googlegroups.com

Published

2022-06-30

Last modified

2024-08-03

Weaknesses

CWE-352

Affected products

• Request Rename Or Delete (Jenkins)
• Jenkins Request Rename Or Delete Plugin (Jenkins Project)

References

• https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2657