VulnCheck KEV: CVE-2018-1000600

A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCredentialsCreator.java that allows attackers to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in...

CVE-2018-1000600

creationtimestamp| type| source ---|---|--- 2021-09-21 06:42:55+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/9...

CVE-2018-1000600

CVE-2018-1000600 affects the Jenkins GitHub Plugin (versions ≤ 1.29.1). The accompanying Nuclei template describes a server-side request forgery (SSRF) vulnerability in GitHubTokenCredentialsCreator.java, enabling an attacker to use an attacker-specified URL and credentials IDs obtained via anoth...