-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| io.jenkins.plugins:warnings-ng | maven | < 5.1.0 | 5.1.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from an endpoint accepting non-POST requests to reset warning counts. Jenkins plugin security fixes for CSRF typically involve adding @RequirePOST annotations. The ResetReferenceBuildAction.doReset method would be the logical handler for this functionality based on Jenkins convention and the advisory's description of the attack vector. The changelog's explicit mention of POST requirement confirms the HTTP method validation was the missing security control.
JavaJavaOngoing coverage of React2Shell