Executive brief
CSRF vulnerability and missing permission checks in Jenkins Extended Choice Parameter Plugin allow SSRF
Affected products
- Maven org.jenkins-ci.plugins:extended-choice-parameter
Junglewise Threat Intelligence
CVE-2022-27204: CSRF vulnerability and missing permission checks in Jenkins Extended Choice Parameter Plugin allow SSRF
CVE-2022-27204 · Severity: low · CVSS 3.1 · Published 2022-03-16
Technologies: org.jenkins-ci.plugins:extended-choice-parameter (Maven). Vendors: Maven.
Related threats
- Stored Cross-site Scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin
- Stored Cross-site Scripting vulnerability in Jenkins Extended Choice Parameter Plugin
- Arbitrary JSON and property file read vulnerability in Jenkins Extended Choice Parameter Plugin
- CSRF vulnerability and missing permission checks in Extended Choice Parameter Plugin allow SSRF