| Package | Affected versions | Patched versions |
|---|---|---|
| org.jvnet.hudson.plugins:warnings | < 5.0.1 | 5.0.1 |
| warnings | ≤ 5.0.0 |
A cross-site request forgery vulnerability exists in Jenkins Warnings Plugin 5.0.0 and earlier in src/main/java/hudson/plugins/warnings/GroovyParser.java that allows attackers to execute arbitrary code via a form validation HTTP endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free