Описание
CSRF vulnerability in Jenkins Libvirt Agents Plugin
Jenkins Libvirt Agents Plugin 1.9.0 and earlier does not require POST requests for a form submission endpoint, resulting in a cross-site request forgery (CSRF) vulnerability.
This vulnerability allows attackers to stop hypervisor domains.
Jenkins Libvirt Agents Plugin 1.9.1 requires POST requests for the affected HTTP endpoint.
Пакеты
Наименование
org.jenkins-ci.plugins:libvirt-slave
maven
Затронутые версииВерсия исправления
<= 1.9.0
1.9.1
Связанные уязвимости
CVSS3: 8.8
nvd
почти 5 лет назад
A cross-site request forgery (CSRF) vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains.