CVE-2022-30953: CSRF
A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2022-30953?
CVE-2022-30953 is a cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier that allows attackers to connect to an attacker-specified HTTP server.
How severe is CVE-2022-30953?
CVE-2022-30953 has a severity rating of 6.5 (medium).
Which software versions are affected by CVE-2022-30953?
Jenkins Blue Ocean Plugin versions up to and including 1.25.3 are affected by CVE-2022-30953.
What is the remedy for CVE-2022-30953?
To fix CVE-2022-30953, update the Jenkins Blue Ocean Plugin to version 1.25.4 or newer.
Where can I find more information about CVE-2022-30953?
You can find more information about CVE-2022-30953 at the following references: [Jenkins Security Advisory](https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2502), [Red Hat Security Advisory](https://access.redhat.com/errata/RHSA-2023:0017), [Red Hat CVE-2022-30953](https://access.redhat.com/security/cve/cve-2022-30953).