Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jenkins Request Rename Or Delete Plugin unspecified Clear all filters
TI-2022-15622 CVE-2022-34815 · GHSA-qq85-8g89-r5rc

Cross-site request forgery in Jenkins Request Rename Or Delete Plugin

Priority LOW 21

A cross-site request forgery (CSRF) vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00489 Published 2022-06-30 No fix listed CWE-352
TI-2022-15621 CVE-2022-34814 · GHSA-qhmj-29vh-8mjm

Incorrect authorization in Jenkins Request Rename Or Delete Plugin

Priority LOW 21

Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page li…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00604 Published 2022-06-30 No fix listed CWE-863