Back to bug 2044487

Who When What Removed Added
Michael Kaplan 2022-01-24 17:07:11 UTC Summary CVE-2022-20613 jenkins-2-plugins/mailer: does not perform a permission check in a method implementing form validation which could lead to CSRF CVE-2022-20613 jenkins-2-plugins/mailer: form validation method does not require POST requests which could lead to CSRF
Przemyslaw Roguski 2022-01-25 10:43:10 UTC Doc Text A cross-site request forgery (CSRF) vulnerability was found in the Jenkins Mailer plugin. The form validation method does not require POST requests.
Przemyslaw Roguski 2022-01-25 10:48:08 UTC Depends On 2044915, 2044914, 2044912, 2044913
Adam Kaplan 2022-01-26 18:52:25 UTC CC adam.kaplan
Przemyslaw Roguski 2022-01-28 16:54:34 UTC Depends On 2044912
Przemyslaw Roguski 2022-01-28 16:57:26 UTC Depends On 2047839
Red Hat Bugzilla 2022-05-09 08:29:53 UTC CC aos-bugs
Red Hat Bugzilla 2022-09-30 18:51:02 UTC CC pbhattac
Red Hat Bugzilla 2023-07-07 08:28:06 UTC Assignee security-response-team nobody

Back to bug 2044487