Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery

🗓️ 14 May 2022 03:13:13Reported by GitHub Advisory DatabaseType

Jenkins GitHub Branch Source Plugin SSRF and CSRF vulnerabilitie

Reporter	Title	Published	Views	Family All 7
RedhatCVE	CVE-2018-1000185	6 Jun 201814:52	–	redhatcve
Prion	Server side request forgery (ssrf)	5 Jun 201820:29	–	prion
OSV	Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery	14 May 202203:13	–	osv
OSV	CVE-2018-1000185	5 Jun 201820:29	–	osv
NVD	CVE-2018-1000185	5 Jun 201820:29	–	nvd
Cvelist	CVE-2018-1000185	5 Jun 201820:00	–	cvelist
CVE	CVE-2018-1000185	5 Jun 201820:29	–	cve

Vulners

Node

org.jenkins\-ci.plugins github\-branch\-sourceRange≤2.3.4

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-1000185
jenkins	www.jenkins.io/security/advisory/2018-06-04/
github	www.github.com/jenkinsci/github-branch-source-plugin/commit/22d3383002274bc3f4368534eba2b5c852e78b39
github	www.github.com/advisories/GHSA-9cfq-v2hm-c3xr

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo