A cross-site request forgery vulnerability exists in Jenkins Warnings Plugin 5.0.0 and earlier in src/main/java/hudson/plugins/warnings/GroovyParser.java that allows attackers to execute arbitrary code via a form validation HTTP endpoint.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.jvnet.hudson.plugins:warnings(Maven) | 0 | 5.0.1 | N/A |
CVSS Metrics
