A cross-site request forgery (CSRF) vulnerability in Jenkins Autocomplete Parameter Plugin 1.1 and earlier allows attackers to execute arbitrary code without sandbox protection if the victim is an administrator.

Affected Packages

Maven org.jenkins-ci.plugins:autocomplete-parameter

Affected versions: 0 (last affected: 1.1)

Related CVEs

CVE-2022-30969

Key Information

GHSA ID

GHSA-7c3v-2jjv-hq3c

Published

May 18, 2022 12:00 AM

Last Modified

December 2, 2022 8:09 PM

CVSS Score

7.5 /10

Primary Ecosystem

Maven

Primary Package

org.jenkins-ci.plugins:autocomplete-parameter

GitHub Reviewed

✓ Yes

Dataset

Last updated: July 5, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.