Описание
Jenkins iceScrum Plugin vulnerable to Cross-site Request Forgery
A cross-site request forgery vulnerability in Jenkins iceScrum Plugin prior to version 1.1.6 allows attackers to connect to an attacker-specified URL using attacker-specified credentials. This issue is patched in version 1.1.6
Пакеты
Наименование
org.jenkins-ci.plugins:icescrum
maven
Затронутые версииВерсия исправления
< 1.1.6
1.1.6
Связанные уязвимости
CVSS3: 4.3
nvd
больше 6 лет назад
A cross-site request forgery vulnerability in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.