Jenkins Pipeline
Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins_project:jenkins_pipeline:_stage_view_plugin:*:*:*:*:*:*:*:*
part: a version: _stage_view_plugin update: *
| Vendor | Jenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462) |
|---|---|
| Product | Jenkins Pipeline (f575b609-c686-543c-aacb-c3c480aae6f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-43408 |
not_vulnerable | 2026-06-08 05:49:31.789301 |
Details available
Jenkins Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of 'input' steps when using it to generate URLs to proceed or abort Pipeline builds, allowing attackers able to configure Pipelines to specify 'input' step IDs resulting in URLs that would bypass the CSRF protection of any target URL in Jenkins.
Published: 2022-10-19T00:00:00.000Z
Updated: 2025-05-08T19:24:47.323Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.