GHSA-64c5-r2h5-c2fg
Jenkins docker-build-step Plugin Cross-Site Request Forgery vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.jenkins-ci.plugins:docker-build-step | <= 2.11 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A cross-site request forgery (CSRF) vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure the plugin using the provided connection test parameters, affecting future build step executions.
References
External links from the advisory. They lead to third-party sites.