A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.
CPE | Name | Operator | Version |
---|---|---|---|
mailer | eq | 391.0.0-ve4-a38-c1-bcf4-b | |
mailer | lt | 1.34.2 | |
communications_cloud_native_core_automated_test_suite | eq | 1.9.0 |