Junglewise Threat Intelligence

CVE-2022-27211: CSRF vulnerability and missing permission checks in Jenkins kubernetes-cd Plugin allow capturing credentials

CVE-2022-27211 · Severity: low · CVSS 3.1 · Published 2022-03-16

Technologies: org.jenkins-ci.plugins:kubernetes-cd (Maven). Vendors: Maven.

Executive brief

CSRF vulnerability and missing permission checks in Jenkins kubernetes-cd Plugin allow capturing credentials

Affected products

  • Maven org.jenkins-ci.plugins:kubernetes-cd

Related threats