GitHub Advisoryadvisory · Maven

GHSA-6w39-qhmq-g8cp CSRF vulnerability in Jenkins Publish Over FTP Plugin

HIGH Published 2022-04-13 Modified 2022-05-04 Official page ↗
Aliases
CVE-2022-29050
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:publish-over-ftp
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-352
Reviewed
2022-05-04

Affected packages

• Maven org.jenkins-ci.plugins:publish-over-ftp: < 1.17 → fixed in 1.17

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over FTP Plugin 1.16 and earlier allows attackers to connect to an FTP server using attacker-specified credentials.

Related

Alias · CVE (1)

  • CVE-2022-29050 A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over FTP Plugin 1.16 and earlier allows attackers to connect to an FTP… vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References