Maven/org.jenkins-ci.plugins:script-security CVE-2022-30946: medium 4.3, EPSS 0.65%

CSRF vulnerability in Jenkins Script Security Plugin

Action: Upgrade org.jenkins-ci.plugins:script-security to 1172.v35f6a or later.

Affected

Fixed versions

Sources

• osv: GHSA-qwgx-mrv5-87j8
• https://nvd.nist.gov/vuln/detail/CVE-2022-30946
• https://github.com/jenkinsci/script-security-plugin/commit/35f6a0b8207ed3a32a85f27c1312da6cd738eeaa
• https://github.com/jenkinsci/script-security-plugin
• https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2116
• http://www.openwall.com/lists/oss-security/2022/05/17/8

CVE-2022-30946 · published 2022-05-18T00:00:39Z · modified 2023-11-08T04:09:20.397766Z · JSON