CVE-2019-10326

Cross-Site Request Forgery (CSRF) in maven/io.jenkins.plugins/warnings-ng

Identifiers

GHSA-px35-882c-47hw, CVE-2019-10326

Package Slug

maven/io.jenkins.plugins/warnings-ng

Vulnerability

Cross-Site Request Forgery (CSRF)

Description

A cross-site request forgery vulnerability in Jenkins Warnings NG Plugin 5.0.0 and earlier allowed attackers to reset warning counts for future builds.

Affected Versions

All versions before 5.1.0

Solution

Upgrade to version 5.1.0 or above.

Last Modified

2024-01-31

source