PT-2019-11783 · Jenkins · Jenkins Relution Enterprise Appstore Publisher Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Relution Enterprise Appstore Publisher Plugin versions 1.24 and earlier Description: A missing permission check in the plugin allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server. Recommendation...