En resumen
- CVE-2019-16550 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a org.jenkins-ci.plugins.m2release:m2release, maven (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.80%, mayor que el 56.6% de las vulnerabilidades.
- Solución: actualizar a 0.16.2 o posterior.
Description
A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have Jenkins connect to an attacker specified web server and parse XML documents.
NVD description
A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have Jenkins connect to an attacker specified web server and parse XML documents.
Más vulnerabilidades de org.jenkins-ci.plugins.m2release:m2release
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free