Lucene search
GoogleOSV:GHSA-VX6R-W45X-Q3H6HistoryMay 24, 2022 - 4:59 p.m.
Jenkins Kubernetes CI/CD Plugin vulnerable to Cross-Site Request Forgery
2022-05-2416:59:37
Google
osv.dev
3
0.001 Low
EPSS
Percentile
33.0%
A cross-site request forgery vulnerability in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Note: Jenkins has suspended distribution of this plugin.
Related
cve
cve
CVE-2019-10468
2019-10-23 13:15:10
osv
osv
CVE-2019-10468
2019-10-23 13:15:10
nvd
nvd
CVE-2019-10468
2019-10-23 13:15:10
cvelist
cvelist
CVE-2019-10468
2019-10-23 12:45:42
prion
prion
Cross site request forgery (csrf)
2019-10-23 13:15:00
github
github
Jenkins Kubernetes CI/CD Plugin vulnerable to Cross-Site Request Forgery
2022-05-24 16:59:37