Описание
Jenkins Maven Release Plugin contains Cross-Site Request Forgery vulnerability
A cross-site request forgery vulnerability in Jenkins Maven Release Plugin prior to 0.15.0 in the M2ReleaseAction#doSubmit method allowed attackers to perform releases with attacker-specified options.
Пакеты
Наименование
org.jenkins-ci.plugins.m2release:m2release
maven
Затронутые версииВерсия исправления
< 0.15.0
0.15.0
Связанные уязвимости
CVSS3: 6.3
nvd
больше 6 лет назад
A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to perform releases with attacker-specified options.