CVE-2022-30946: CSRF

Q: What is the severity of CVE-2022-30946?

CVE-2022-30946 is considered a high severity vulnerability due to its ability to allow attackers to send unauthorized HTTP requests.

Q: How do I fix CVE-2022-30946?

To address CVE-2022-30946, upgrade to the version of Jenkins Script Security Plugin that is higher than 1172.v35f6a_0b_8207e.

Q: Which versions of Jenkins are affected by CVE-2022-30946?

CVE-2022-30946 affects Jenkins Script Security Plugin versions 1158.v7c1b_73a_69a_08 and earlier.

Q: What type of vulnerability is CVE-2022-30946?

CVE-2022-30946 is a cross-site request forgery (CSRF) vulnerability.

Q: Can CVE-2022-30946 lead to data breaches?

Yes, CVE-2022-30946 can potentially lead to data breaches as it enables attackers to make unauthorized requests on behalf of an authenticated user.

Published May 17, 2022

Updated

A cross-site request forgery (CSRF) vulnerability in Jenkins Script Security Plugin 1158.v7c1b73a69a08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver.

Affected Software

5 affected componentsFixes available

redhat/jenkins<2-plugins-0:4.10.1675144701-1.el8

2-plugins-0:4.10.1675144701-1.el8

redhat/jenkins<2-plugins-0:4.8.1672842762-1.el8

2-plugins-0:4.8.1672842762-1.el8

redhat/jenkins<2-plugins-0:4.9.1675668922-1.el8

2-plugins-0:4.9.1675668922-1.el8

redhat/Script Security Plugin<1172.

1172.

Jenkins Script Security Jenkins<1172.v35f6a_0b_8207e

Event History

May 17, 2022

CVE Published

12:00 AM

CVE Published

via MITRE·02:05 PM

Data Sourced

via MITRE·02:05 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2022-30946?

CVE-2022-30946 is considered a high severity vulnerability due to its ability to allow attackers to send unauthorized HTTP requests.

How do I fix CVE-2022-30946?