description: A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineCloud#doProvision could be used to provision new agents.
affected:
{
product: Jenkins Google Compute Engine Plugin
vendor: Jenkins project
versions:
status: affected, version: 4.1.1 and earlier
}