CVE-2019-1003020

2019-02-0616:00:00

jenkins

www.cve.org

jenkins

kanboard plugin

ssrf

AI Score

4.5

Confidence

High

EPSS

0.001

Percentile

22.0%

JSON

A server-side request forgery vulnerability exists in Jenkins Kanboard Plugin 1.5.10 and earlier in KanboardGlobalConfiguration.java that allows attackers with Overall/Read permission to submit a GET request to an attacker-specified URL.

CNA Affected

[
  {
    "product": "Jenkins Kanboard Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "status": "affected",
        "version": "1.5.10 and earlier"
      }
    ]
  }
]

References

jenkins.io/security/advisory/2019-01-28/#SECURITY-818