GHSA-7c3v-2jjv-hq3c
Cross-Site Request Forgery in Jenkins Autocomplete Parameter Plugin
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.jenkins-ci.plugins:autocomplete-parameter | <= 1.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A cross-site request forgery (CSRF) vulnerability in Jenkins Autocomplete Parameter Plugin 1.1 and earlier allows attackers to execute arbitrary code without sandbox protection if the victim is an administrator.
References
External links from the advisory. They lead to third-party sites.