~ / search / GHSA-rjjq-63c7-8724

GHSA-rjjq-63c7-8724

CSRF vulnerability in Jenkins P4 Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-2141

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:p4 < 1.10.11 1.10.11

Details

As written in the advisory (Markdown source, shown as plain text).

A cross-site request forgery vulnerability in Jenkins P4 Plugin 1.10.10 and earlier allows attackers to trigger builds or add a labels in Perforce.

References

External links from the advisory. They lead to third-party sites.