Description
A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary files on the Jenkins controller.
Remediation
References
https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1904
http://www.openwall.com/lists/oss-security/2020/09/16/3
Related Vulnerabilities
CVE-2022-1295 Vulnerability in maven package org.webjars.bowergithub.alvarotrigo:fullpage.js
CVE-2021-41182 Vulnerability in maven package org.webjars:jquery-ui
CVE-2023-25762 Vulnerability in maven package org.jenkins-ci.plugins:pipeline-build-step
CVE-2022-36313 Vulnerability in npm package file-type
CVE-2023-33948 Vulnerability in maven package com.liferay.portal:release.portal.bom