Description

A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances.

Remediation

References

http://www.openwall.com/lists/oss-security/2020/05/06/3

https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1408

Related Vulnerabilities

CVE-2020-2183 Vulnerability in maven package org.jenkins-ci.plugins:copyartifact

CVE-2022-21724 Vulnerability in maven package org.postgresql:postgresql

CVE-2022-36127 Vulnerability in npm package skywalking-backend-js

CVE-2019-10771 Vulnerability in npm package iobroker.web

CVE-2021-32818 Vulnerability in npm package haml-coffee

Severity

Medium

Classification

CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Mailing List Third Party Advisory Vendor Advisory