CVE-2018-1000013

CVE-2018-1000013 concerns the Jenkins Release Plugin (versions 2.9 and earlier). The vulnerability arises because release-triggering requests do not require form submissions to be sent via POST, enabling cross-site request forgery (CSRF) attacks that can trigger release builds. Documented impact ...