CVE-2018-1000606

2018-06-2617:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

22.0%

JSON

A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.

CPENameOperatorVersion
urltrigger-pluginequrltrigger-0.3
urltrigger-pluginequrltrigger-0.25
urltrigger-pluginequrltrigger-0.18
urltrigger-pluginequrltrigger-0.10
urltrigger-pluginequrltrigger-0.19
urltrigger-pluginequrltrigger-0.37
urltrigger-pluginequrltrigger-0.4.2
urltrigger-pluginequrltrigger-0.5
urltrigger-pluginequrltrigger-0.4
urltrigger-pluginequrltrigger-0.40

Name	Operator	Version
urltrigger-plugin	eq	urltrigger-0.3
urltrigger-plugin	eq	urltrigger-0.25
urltrigger-plugin	eq	urltrigger-0.18
urltrigger-plugin	eq	urltrigger-0.10
urltrigger-plugin	eq	urltrigger-0.19
urltrigger-plugin	eq	urltrigger-0.37
urltrigger-plugin	eq	urltrigger-0.4.2
urltrigger-plugin	eq	urltrigger-0.5
urltrigger-plugin	eq	urltrigger-0.4
urltrigger-plugin	eq	urltrigger-0.40

Rows per page:

1-10 of 451

References

jenkins.io/security/advisory/2018-06-25/#SECURITY-819

0.001 Low

EPSS

Percentile

22.0%

JSON

Related for OSV:CVE-2018-1000606