GHSA-m485-79jq-cxx7MediumCVSS 4.3

CSRF vulnerability in Jenkins Google Cloud Backup Plugin

Published
July 28, 2022
Last Modified
January 29, 2023

🔗 CVE IDs covered (1)

CVE-2022-36916 →

📋 Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Google Cloud Backup Plugin 0.6 and earlier does not perform a permission check in an HTTP endpoint.

Additionally, this HTTP endpoint does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:google-cloud-backup:<= 0.6

🔗 References (4)