CVE-2019-1003020

A server-side request forgery vulnerability exists in Jenkins Kanboard Plugin 1.5.10 and earlier in KanboardGlobalConfiguration.java that allows attackers with Overall/Read permission to submit a GET request to an attacker-specified URL...

CVE-2019-1003020

CVE-2019-1003020 is a server-side request forgery in Jenkins Kanboard Plugin 1.5.10 and earlier, where an attacker with Overall/Read permission can cause the plugin to submit a GET request to an attacker‑specified URL via KanboardGlobalConfiguration.java. Affected: Jenkins Kanboard Plugin version...