Alpine/jenkins: medium 4.3
A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.
Action: Upgrade jenkins to 2.319.2-r0 (2.319.x) or 2.332.1-r0 (2.332.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.319.2-r0 | - |
Fixed versions
| 2.319.2-r0 | 2.332.1-r0 |
Sources
- osv: ALPINE-CVE-2022-20612#Alpine:v3.16/jenkins
- https://security.alpinelinux.org/vuln/CVE-2022-20612
published · modified · JSON