CVE-2018-1000184

2018-06-0520:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

22.2%

JSON

A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.

CPENameOperatorVersion
github-plugineqgithub-1.0
github-plugineqgithub-1.11.3
github-plugineqgithub-1.18.2
github-plugineqgithub-1.9
github-plugineq1.29.0
github-plugineqgithub-1.7
github-plugineqgithub-1.5
github-plugineq1.19.3
github-plugineqgithub-1.11
github-plugineqgithub-1.9.1

Name	Operator	Version
github-plugin	eq	github-1.0
github-plugin	eq	github-1.11.3
github-plugin	eq	github-1.18.2
github-plugin	eq	github-1.9
github-plugin	eq	1.29.0
github-plugin	eq	github-1.7
github-plugin	eq	github-1.5
github-plugin	eq	1.19.3
github-plugin	eq	github-1.11
github-plugin	eq	github-1.9.1