description: A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds.
affected:
{
product: Jenkins promoted builds Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 3.9, status: affected, version: unspecified, versionType: custom
status: unaffected, version: 3.5.1
}