In short
- CVE-2022-30969 is a HIGH (CVSS 8.8) vulnerability affecting org.jenkins-ci.plugins:autocomplete-parameter, autocomplete parameter (jenkins).
- Chance of exploitation in the next 30 days (EPSS): 0.92%, higher than 60.4% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins Autocomplete Parameter Plugin 1.1 and earlier allows attackers to execute arbitrary code without sandbox protection if the victim is an administrator.
NVD description
A cross-site request forgery (CSRF) vulnerability in Jenkins Autocomplete Parameter Plugin 1.1 and earlier allows attackers to execute arbitrary code without sandbox protection if the victim is an administrator.
More vulnerabilities in org.jenkins-ci.plugins:autocomplete-parameter
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free