| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:websphere-deployer | ≤ 1.6.1 | |
| websphere deployer | ≤ 1.6.1 |
A cross-site request forgery vulnerability in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers to perform connection tests and determine whether files with an attacker-specified path exist on the Jenkins master file system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free