Back to feed
EUVD-2022-5512 · Published May 24, 2022
CSRF vulnerability in Amazon EC2 Plugin Amazon EC2 Plugin 1.50.1 and earlier does not require POST requests in several HTTP endpoints, resulting in cross-site request forgery (CSRF) vulnerabilities. This allows an attacker to provision instances with an attacker-specified template ID. Amazon EC2 Plugin 1.50.2 now requires POST requests for the affected HTTP endpoints.
Technologies
Jenkins Amazon Ec2
Weaknesses
CWE-352
CVSS scores
- v3.03.1
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
