Jenkins Storage Configs vulnerabilities

1 known vulnerability affecting jenkins/storage_configs.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-30972HIGHCVSS 8.8≤ 1.02022-05-17

CVE-2022-30972 [HIGH] CWE-352 CVE-2022-30972: A cross-site request forgery (CSRF) vulnerability in Jenkins Storable Configs Plugin 1.0 and earlier A cross-site request forgery (CSRF) vulnerability in Jenkins Storable Configs Plugin 1.0 and earlier allows attackers to have Jenkins parse a local XML file (e.g., archived artifacts) that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.