| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:xpath-config-viewer | ≤ 1.1.1 | |
| xpath configuration viewer | ≤ 1.1.1 |
A cross-site request forgery (CSRF) vulnerability in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers to create and delete XPath expressions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free