https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:40:13 +0000 https://cve.radiocsirt.org/vuln/cve-2022-43407 <p><strong>Affected:</strong> Jenkins project Jenkins Pipeline: Input Step Plugin</p> <p>Jenkins Pipeline: Input Step Plugin 451.vf1a_a_4f405289 and earlier does not restrict or sanitize the optionally specified ID of the &#39;input&#39; step, which is used for the URLs that process user interactions for the given &#39;input&#39; step (proceed or abort) and is not correctly encoded, allowing attackers able to configure Pipelines to have Jenkins build URLs from &#39;input&#39; step IDs that would bypass the CSRF protection of any target URL in Jenkins when the &#39;input&#39; step is interacted with.</p> <p><strong>Affected:</strong> Jenkins project Jenkins Pipeline: Input Step Plugin</p> <p>Jenkins Pipeline: Input Step Plugin 451.vf1a_a_4f405289 and earlier does not restrict or sanitize the optionally specified ID of the &#39;input&#39; step, which is used for the URLs that process user interactions for the given &#39;input&#39; step (proceed or abort) and is not correctly encoded, allowing attackers able to configure Pipelines to have Jenkins build URLs from &#39;input&#39; step IDs that would bypass the CSRF protection of any target URL in Jenkins when the &#39;input&#39; step is interacted with.</p> https://cve.radiocsirt.org/vuln/cve-2022-43407