Lucene search

CVE-2019-10386

🗓️ 07 Aug 2019 15:13:15Reported by jenkinsType

A CSRF vulnerability in Jenkins XL TestView Plugin 1.2.0 and earlier allows attackers to connect to a specified URL using obtained credentials

Reporter	Title	Published	Views	Family All 6
OSV	CVE-2019-10386	7 Aug 201915:15	–	osv
OSV	Cross-site request forgery vulnerability in Jenkins XL TestView Plugin	24 May 202216:52	–	osv
NVD	CVE-2019-10386	7 Aug 201915:15	–	nvd
Github Security Blog	Cross-site request forgery vulnerability in Jenkins XL TestView Plugin	24 May 202216:52	–	github
Cvelist	CVE-2019-10386	7 Aug 201914:20	–	cvelist
Prion	Cross site request forgery (csrf)	7 Aug 201915:15	–	prion

Nvd

Node

jenkins xl_testviewRange≤1.2.0jenkins

[
  {
    "product": "Jenkins XL TestView Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.0 and earlier"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2019/08/07/1
jenkins	www.jenkins.io/security/advisory/2019-08-07/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Aug 2019 15:15Current

8.6High risk

Vulners AI Score8.6

CVSS26.8

CVSS38.8

EPSS0.00127

CWE-352