-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe key vulnerability stemmed from missing HTTP method validation. The commit diff shows the critical fix was adding @RequirePOST to doSliceconfigSubmit. This method handles slice reconfiguration submissions, and without POST requirement, it was susceptible to CSRF. The test additions and permission changes support the fix but aren't the primary vulnerability source. The CWE-352 mapping and advisory explicitly mention the missing POST requirement as the root cause.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:configurationslicing | maven | <= 1.51 | 1.52 |
JavaJavaOngoing coverage of React2Shell