Jenkins SCP publisher Plugin cross-site request forgery vulnerability

Jenkins is a Jenkins open source application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins SCP publisher Plugin 1.8 and earlier versions are vulnerable to cross-site request forgery, which stems from a WEB application that does not adequately verify that the request is from a trusted user, and can be exploited by an attacker to connect to an SSH server .