{"id":"CVE-2022-23115","details":"Cross-site request forgery (CSRF) vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task.","aliases":["GHSA-mh8g-8jwp-q6xw"],"modified":"2026-07-09T02:49:19.071444Z","published":"2022-01-12T20:15:09.657Z","references":[{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2022/01/12/6"},{"type":"ADVISORY","url":"https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1025"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/batch-task-plugin","events":[{"introduced":"0"},{"last_affected":"d3e464f1f8858b449c3950893053e41e6140de7a"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:jenkins:batch_task:*:*:*:*:*:jenkins:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.19"}]}}],"versions":["batch-task-1.19","batch-task-1.18","batch-task-1.17","batch-task-1.16","batch-task-1.15"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23115.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"}]}