OpenShift Deployer Plugin 1.2.0 and earlier does not perform a permission check in a method implementing form validation.
This form validation method does not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.
{ "github_reviewed_at": "2022-08-10T18:35:56Z", "github_reviewed": true, "nvd_published_at": "2022-07-27T15:15:00Z", "cwe_ids": [ "CWE-352" ], "severity": "MODERATE" }