Description
A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary files on the Jenkins controller.
Remediation
References
https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1904
http://www.openwall.com/lists/oss-security/2020/09/16/3
Related Vulnerabilities
CVE-2022-25896 Vulnerability in npm package passport
CVE-2023-43123 Vulnerability in maven package org.apache.storm:storm-core
CVE-2012-5885 Vulnerability in maven package org.apache.tomcat:catalina
CVE-2023-37947 Vulnerability in maven package org.openshift.jenkins:openshift-login
CVE-2021-26544 Vulnerability in maven package org.apache.livy:livy-server