Executive brief
CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin
Affected products
- Maven org.jenkins-ci.plugins:pipeline-input-step
Junglewise Threat Intelligence
CVE-2022-43407: CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin
CVE-2022-43407 · Severity: low · CVSS 3.1 · Published 2022-10-19
Technologies: org.jenkins-ci.plugins:pipeline-input-step (Maven). Vendors: Maven.