CVE-2019-10454

Description

A cross-site request forgery vulnerability in Jenkins Rundeck Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials.

Affected products

• Jenkins Project / Jenkins Rundeck Plugin3.6.5 and earlier – 3.6.5 and earlier

References

• MISChttps://jenkins.io/security/advisory/2019-10-16/#SECURITY-1460