-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from missing CSRF protections (POST requirement) and missing permission checks in form validation handlers. The commit diff shows these two methods were patched with @RequirePOST annotations and Jenkins ADMINISTER permission checks, confirming they were the attack vectors. The advisory explicitly mentions these form validation methods as the source of CSRF and permission issues.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger | maven | < 2.30.2 | 2.30.2 |