CVE-2022-30946: Jenkins Script Security

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in Jenkins Script Security Plugin 1158.v7c1b_73a_69a_08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver.

Affected products

• Jenkins Script Security: before 1172.v35f6a_0b_8207e (fixed in 1172.v35f6a_0b_8207e)

Published 2022-05-17. Last modified 2026-06-17.