CVE-2022-34200

CWE-352 — Cross-Site Request Forgery (CSRF)5 documents5 sources

Severity

8.8HIGH

EPSS

0.1%

top 78.02%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Jenkins Project Jenkins Convertigo Mobile Platform Plugin Jenkins Convertigo Mobile Platform

Timeline

PublishedJun 23

Latest updateJun 24

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier allows attackers to connect to an attacker-specified URL.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5jenkins_project/jenkins_convertigo_mobile_platform_pluginunspecified — 1.1

▶Mavencom.convertigo.jenkins.plugins:convertigo-mobile-platform1.1

▶NVDjenkins/convertigo_mobile_platform1.1

🔴Vulnerability Details

GHSA

Cross-Site Request Forgery in Jenkins Convertigo Mobile Platform Plugin↗2022-06-24

▶

OSV

Cross-Site Request Forgery in Jenkins Convertigo Mobile Platform Plugin↗2022-06-24

▶

CVEList

CVE-2022-34200: A cross-site request forgery (CSRF) vulnerability in Jenkins Convertigo Mobile Platform Plugin 1↗2022-06-22

▶

📋Vendor Advisories

Jenkins

Jenkins Security Advisory 2022-06-22↗2022-06-22

▶