| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:libvirt-slave | < 1.9.1 | 1.9.1 |
| libvirt agents | ≤ 1.9.0 |
Jenkins Libvirt Agents Plugin 1.9.0 and earlier does not require POST requests for a form submission endpoint, resulting in a cross-site request forgery (CSRF) vulnerability.
This vulnerability allows attackers to stop hypervisor domains.
Jenkins Libvirt Agents Plugin 1.9.1 requires POST requests for the affected HTTP endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free