-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:cloudfoundry | maven | <= 2.3.1 | 2.3.2 |
Miggo AIRoot Cause AnalysisThe vulnerability description explicitly references a form validation() method with missing authorization checks and CSRF protections. The commit diff shows security hardening in AbstractCloudFoundryPushDescriptor.java's doTestConnection method, adding permission checks (checkPermission(Item.CONFIGURE)) and requiring POST requests. This matches the advisory's description of the patched vulnerability location and mechanism.