Executive brief
Jenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request Forgery
Affected products
- Maven org.jenkins-ci.plugins:github-branch-source
Junglewise Threat Intelligence
CVE-2017-1000091: Jenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request Forgery
CVE-2017-1000091 · Severity: low · CVSS 3 · Published 2022-05-17
Technologies: org.jenkins-ci.plugins:github-branch-source (Maven). Vendors: Maven.
Related threats
- Jenkins GitHub Branch Source Plugin missing permission check in API endpoint
- Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test
- Jenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDs
- Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery