Executive brief
Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request Forgery
Affected products
- Maven io.jenkins.plugins:cavisson-ns-nd-integration
Junglewise Threat Intelligence
CVE-2022-41227: Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-Site Request Forgery
CVE-2022-41227 · Severity: low · CVSS 3.1 · Published 2022-09-22
Technologies: io.jenkins.plugins:cavisson-ns-nd-integration (Maven). Vendors: Maven.
Related threats
- Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking
- Plaintext Storage of a Password in Jenkins NS-ND Integration Performance Publisher Plugin
- Jenkins NS-ND Integration Performance Publisher Plugin disables SSL/TLS certificate validation globally and unconditionally
- Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Missing Authorization
- Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-site Scripting