CVE-2019-16550

CVE-2019-16550

EPSS 0.6%

A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have Jenkins connect to an attacker specified web server and parse XML documents.

Productos afectados

Jenkins project · Jenkins Maven Release Plugin

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1681 http://www.openwall.com/lists/oss-security/2019/12/17/1