Maven/io.jenkins.plugins:embotics-vcommander CVE-2022-25192: medium 5.4, EPSS 0.66%

Jenkins Snow Commander Plugin 2.0 vulnerable to Cross-Site Request Forgery

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-fhfh-6cjg-57rg
• https://nvd.nist.gov/vuln/detail/CVE-2022-25192
• https://github.com/jenkinsci/snowsoftware-commander-plugin/commit/4fb4e68e8e7be3168721a06ad08b263252c276f1
• https://github.com/jenkinsci/snowsoftware-commander-plugin
• https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2536

CVE-2022-25192 · published 2022-02-16T00:01:25Z · modified 2023-11-08T04:08:43.127Z · JSON