-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| net.praqma:matrix-reloaded | maven | <= 1.1.3 |
JavaJavaMiggo AIRoot Cause AnalysisThe vulnerability stems from an HTTP endpoint accepting rebuild requests without POST method enforcement. In Jenkins plugin architecture, such endpoints typically correspond to 'do*' methods in Action classes. The advisory explicitly states the lack of POST requirement, which maps to missing @RequirePOST annotation and CSRF protection in the rebuild handler. While exact code isn't available, this pattern matches Jenkins' vulnerability patterns for CSRF (CWE-352) and the plugin's described functionality.
Ongoing coverage of React2Shell