CVE-2019-16550

CVE-2019-16550

EPSS 0.6%

A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have Jenkins connect to an attacker specified web server and parse XML documents.

Produtos afetados

Jenkins project · Jenkins Maven Release Plugin

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1681 http://www.openwall.com/lists/oss-security/2019/12/17/1