← Database

CVE-2022-34814

MEDIUM CVSS: 4.3 Published: 2022-06-30 Modified: 2026-06-17

Description

Jenkins Request Rename Or Delete Plugin 1.1.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view an administrative configuration page listing pending requests.

Affected Platforms

Jenkins Request Rename Or Delete

Weakness Type

CWE-863

References