← Database

CVE-2022-34812

MEDIUM CVSS: 4.3 Published: 2022-06-30 Modified: 2026-06-17

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers to create and delete XPath expressions.

Affected Platforms

Jenkins Xpath Configuration Viewer

Weakness Type

CWE-352

References