CVE-2022-34205: CSRF
Published Jun 22, 2022
·Updated
A cross-site request forgery (CSRF) vulnerability in Jenkins Jianliao Notification Plugin 1.1 and earlier allows attackers to send HTTP POST requests to an attacker-specified URL.
Affected Software
1 affected component
Jenkins Jianliao Notification Jenkins<=1.1
Event History
Jun 22, 2022
CVE Published
via MITRE·02:41 PM
Data Sourced
via MITRE·02:41 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-34205?
CVE-2022-34205 has a medium severity rating due to its potential for exploitation via CSRF attacks.
2
How do I fix CVE-2022-34205?
To fix CVE-2022-34205, update the Jenkins Jianliao Notification Plugin to version 1.2 or later.
3
What type of vulnerability is CVE-2022-34205?
CVE-2022-34205 is a cross-site request forgery (CSRF) vulnerability.
4
What impact does CVE-2022-34205 have on my Jenkins instance?
CVE-2022-34205 allows attackers to send unauthorized HTTP POST requests to specified URLs, potentially compromising security.
5
Who is affected by CVE-2022-34205?
CVE-2022-34205 affects users running Jenkins Jianliao Notification Plugin versions 1.1 and earlier.