CVE-2022-30969: vulnerability in Jenkins Autocomplete Parameter Plugin
Published · Updated
Follow this CVE+ Monitor Jenkins Autocomplete Parameter Plugin+ Monitor org.jenkins-ci.plugins:autocomplete-parameter
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.9%
A cross-site request forgery (CSRF) vulnerability in Jenkins Autocomplete Parameter Plugin 1.1 and earlier allows attackers to execute arbitrary code without sandbox protection if the victim is an administrator.
Affected products
Jenkins project · Jenkins Autocomplete Parameter PluginRelated CVEs — Jenkins Autocomplete Parameter Plugin
In the same product, most dangerous first.