Junglewise Threat Intelligence

CVE-2022-36887: Jenkins Job Configuration History Plugin does not require POST requests for several HTTP endpoints

CVE-2022-36887 · Severity: low · CVSS 3.1 · Published 2022-07-28

Technologies: org.jenkins-ci.plugins:jobConfigHistory (Maven). Vendors: Maven.

Executive brief

Jenkins Job Configuration History Plugin does not require POST requests for several HTTP endpoints

Affected products

  • Maven org.jenkins-ci.plugins:jobConfigHistory

Related threats