Jenkins autonomiq Plugin跨站请求伪造漏洞

Jenkins is a Jenkins open source application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.A cross-site request forgery vulnerability exists in Jenkins autonomiq Plugin 1.15 and earlier versions, which stems from a WEB application that does not adequately validate that the request is from a trusted user, and can be exploited by an attacker to connect to an attacker-specified URL using the attacker’s username and password to connect to an attacker-specified URL.