description: A cross-site request forgery (CSRF) vulnerability in Jenkins requests-plugin Plugin 2.2.12 and earlier allows attackers to create requests and/or have administrators apply pending requests.
affected:
{
product: Jenkins requests-plugin Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 2.2.12, status: affected, version: unspecified, versionType: custom
}