Jenkins XebiaLabs XL Release Plugin Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins XebiaLabs XL Release Plugin 22.0.0 contains a cross-site request forgery vulnerability that stems from a special method that makes the specified credential ID to connect to an attacker-specified HTTP server, which can be exploited to capture the credentials stored in Jenkins.