Cross-site request forgery In org.jenkins-ci.plugins:git
Description
Cross-Site Request Forgery in Jenkins Git Plugin A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows attackers to create a Git tag in a workspace and attach corresponding metadata to a build record.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 3.9.2 |
Aliases
1. 2. 3. 4. 5. 6.
References
1. 2.