CVE-2022-41236: Jenkins Security Inspector

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in Jenkins Security Inspector Plugin 117.v6eecc36919c2 and earlier allows attackers to replace the generated report stored in a per-session cache and displayed to authorized users at the .../report URL with a report based on attacker-specified report generation options.

Affected products

• Jenkins Security Inspector: up to and including 117.v6eecc36919c2

Published 2022-09-21. Last modified 2026-06-17.