CSRF vulnerability in Jenkins Job and Node ownership Plugin

中危 4.3CVE-2022-28152 · GHSA-9hcj-449v-9234 · Published 29/03/2022 · updated 17/06/2026

要点

CVE-2022-28152 是影响 com.synopsys.jenkinsci:ownership, job and node ownership (jenkins) 的中危 (CVSS 4.3)漏洞。
未来 30 天内被利用的概率（EPSS）：0.61%，高于 49.2% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
com.synopsys.jenkinsci:ownership Maven	`≤ 0.13.0`	No fix yet
job and node ownership jenkins	`≤ 0.13.0`	No fix yet

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job.

NVD description

A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job.

References

nvd.nist.gov/vuln/detail/CVE-2022-28152 · ADVISORY
jenkinsci/ownership-plugin · PACKAGE
jenkins.io/security/advisory/2022-03-29 · WEB
openwall.com/lists/oss-security/2022/03/29/1 · WEB
jenkins.io/security/advisory/2022-03-29 · Vendor Advisory

com.synopsys.jenkinsci:ownership 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

com.synopsys.jenkinsci:ownership

Maven

≤ 0.13.0

No fix yet

job and node ownership

jenkins

≤ 0.13.0

No fix yet

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job.

NVD description

A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers to restore the default ownership of a job.

com.synopsys.jenkinsci:ownership 的其他漏洞

查看全部 →