CVE-2019-1003007

2019-02-0616:29:00

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.5%

JSON

A cross-site request forgery vulnerability exists in Jenkins Warnings Plugin 5.0.0 and earlier in src/main/java/hudson/plugins/warnings/GroovyParser.java that allows attackers to execute arbitrary code via a form validation HTTP endpoint.

CPENameOperatorVersion
warnings-plugineqwarnings-4.8
warnings-plugineqwarnings-4.21
warnings-plugineqwarnings-4.1
warnings-plugineqwarnings-5.0.0
warnings-plugineqwarnings-4.11
warnings-plugineqwarnings-4.31
warnings-plugineqwarnings-3.15
warnings-plugineqwarnings-4.50
warnings-plugineqwarnings-4.40
warnings-plugineqwarnings-4.12

Name	Operator	Version
warnings-plugin	eq	warnings-4.8
warnings-plugin	eq	warnings-4.21
warnings-plugin	eq	warnings-4.1
warnings-plugin	eq	warnings-5.0.0
warnings-plugin	eq	warnings-4.11
warnings-plugin	eq	warnings-4.31
warnings-plugin	eq	warnings-3.15
warnings-plugin	eq	warnings-4.50
warnings-plugin	eq	warnings-4.40
warnings-plugin	eq	warnings-4.12