← Database

CVE-2022-30969

HIGH CVSS: 8.8 Published: 2022-05-17 Modified: 2026-06-17

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Autocomplete Parameter Plugin 1.1 and earlier allows attackers to execute arbitrary code without sandbox protection if the victim is an administrator.

Affected Platforms

Jenkins Autocomplete Parameter

Weakness Type

CWE-352

References