CVE-2019-10462

2019-10-2313:15:10

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

JSON

A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.

CPENameOperatorVersion
dynatrace-plugineqdynatrace-dashboard-2.0.5
dynatrace-plugineqdynatrace-dashboard-2.1.0
dynatrace-plugineqdynatrace-dashboard-2.0.7
dynatrace-plugineqdynatrace-dashboard-2.1.3
dynatrace-plugineqdynatrace-dashboard-2.0.4
dynatrace-plugineqdynatrace-dashboard-1.0.10

Name	Operator	Version
dynatrace-plugin	eq	dynatrace-dashboard-2.0.5
dynatrace-plugin	eq	dynatrace-dashboard-2.1.0
dynatrace-plugin	eq	dynatrace-dashboard-2.0.7
dynatrace-plugin	eq	dynatrace-dashboard-2.1.3
dynatrace-plugin	eq	dynatrace-dashboard-2.0.4
dynatrace-plugin	eq	dynatrace-dashboard-1.0.10