CVE-2019-10315
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 2.1%
exploitation probability
2.1%top 20% of all CVEs
observed exploitation
nono source reports it
Jenkins GitHub Authentication Plugin 0.31 and earlier did not use the state parameter of OAuth to prevent CSRF.
Affected products
Jenkins project · Jenkins GitHub Authentication Plugin