Описание
Jenkins Dynatrace Plugin vulnerable to Cross-Site Request Forgery
A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin prior to 2.1.4 allows attackers to connect to an attacker-specified URL using attacker-specified credentials.
##NOTE: This plugin is marked as DEPRECATED
Пакеты
Наименование
org.jenkins-ci.plugins:dynatrace-dashboard
maven
Затронутые версииВерсия исправления
< 2.1.4
2.1.4
Связанные уязвимости
CVSS3: 8.1
nvd
больше 6 лет назад
A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.