Jenkins Build-Publisher Plugin vulnerabilities
1 known vulnerability in Jenkins Build-Publisher Plugin from Jenkins. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.0average CVSS score
Latest first
- 8.0 High severity
Jenkins Build-Publisher Plugin: Cross-Site Request Forgery
A cross-site request forgery (CSRF) vulnerability in Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers to replace any config.xml file on the Jenkins controller file system with an empty file by providing a crafted file name to an API endpoint.