Lucene search

K
osvGoogleOSV:CVE-2019-10321
HistoryMay 31, 2019 - 3:29 p.m.

CVE-2019-10321

2019-05-3115:29:00
Google
osv.dev
4

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

49.9%

A cross-site request forgery vulnerability in Jenkins Artifactory Plugin 3.2.2 and earlier in ArtifactoryBuilder.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

49.9%

Related for OSV:CVE-2019-10321