Filtered by vendor Jenkins Subscriptions
Filtered by product Storage Configs Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-30972 1 Jenkins 1 Storage Configs 2024-11-21 8.8 High
A cross-site request forgery (CSRF) vulnerability in Jenkins Storable Configs Plugin 1.0 and earlier allows attackers to have Jenkins parse a local XML file (e.g., archived artifacts) that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.