CVE-2022-34209

Summary

A cross-site request forgery (CSRF) vulnerability in Jenkins ThreadFix Plugin 1.5.4 and earlier allows attackers to connect to an attacker-specified URL.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins ThreadFix Pluginunspecified <= 1.5.4affected
Jenkins projectJenkins ThreadFix Pluginnext of 1.5.4 < unspecifiedunknown

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References