CVE-2018-1999026

2018-08-0113:29:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java that allows attackers to have Jenkins send HTTP requests to an attacker-specified host.

CPENameOperatorVersion
ecutest-plugineqecutest-2.2
ecutest-plugineqecutest-2.1
ecutest-plugineqecutest-1.16
ecutest-plugineqecutest-1.17
ecutest-plugineqecutest-1.7
ecutest-plugineqecutest-1.18
ecutest-plugineqecutest-1.0
ecutest-plugineqecutest-1.8
ecutest-plugineqecutest-1.2
ecutest-plugineqecutest-1.10

Name	Operator	Version
ecutest-plugin	eq	ecutest-2.2
ecutest-plugin	eq	ecutest-2.1
ecutest-plugin	eq	ecutest-1.16
ecutest-plugin	eq	ecutest-1.17
ecutest-plugin	eq	ecutest-1.7
ecutest-plugin	eq	ecutest-1.18
ecutest-plugin	eq	ecutest-1.0
ecutest-plugin	eq	ecutest-1.8
ecutest-plugin	eq	ecutest-1.2
ecutest-plugin	eq	ecutest-1.10