Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-37E9A43361B1F40925D7B90D7E22ECE4HistoryDec 17, 2019 - 12:00 a.m.
Cross-Site Request Forgery (CSRF)
2019-12-1700:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
7
0.001 Low
EPSS
Percentile
33.0%
A cross-site request forgery vulnerability in Jenkins Alauda DevOps Pipeline allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
| CPE | Name | Operator | Version |
|---|---|---|---|
| maven/com.alauda.jenkins.plugins/alauda-devops-pipeline | le | 2.3.2 |
Related
cve
cve
CVE-2019-16573
2019-12-17 15:15:23
nvd
nvd
CVE-2019-16573
2019-12-17 15:15:23
cvelist
cvelist
CVE-2019-16573
2019-12-17 14:40:55
osv
osv
CVE-2019-16573
2019-12-17 15:15:23
prion
prion
Cross site request forgery (csrf)
2019-12-17 15:15:00
github
github