Jenkins: >> Request Rename Or Delete >> 1.0.2 Security Vulnerabilities
Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests.
CVSS Score
4.3
EPSS Score
0.007
Published
2022-06-30
A cross-site request forgery (CSRF) vulnerability in Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier allows attackers to accept pending requests, thereby renaming or deleting jobs.
CVSS Score
4.3
EPSS Score
0.001
Published
2022-06-30