Description

A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary files on the Jenkins controller.

Remediation

References

https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1904

http://www.openwall.com/lists/oss-security/2020/09/16/3

Related Vulnerabilities

CVE-2022-29230 Vulnerability in npm package @shopify/hydrogen

CVE-2023-25158 Vulnerability in maven package org.geotools:gt-main

CVE-2021-24033 Vulnerability in npm package react-dev-utils

CVE-2021-21608 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2023-28443 Vulnerability in npm package directus

Severity

Critical

Classification

CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Vendor Advisory Mailing List Third Party Advisory