| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:docker-build-step | ≤ 2.11 | |
| docker-build-step | ≤ 2.11 |
A cross-site request forgery (CSRF) vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build step executions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free