CVE-2019-10304

A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the CredentialdoValidateUserNamePassword form validation method allows attackers to initiate a connection to an attacker-specified server...

CVE-2019-10304

The CVE-2019-10304 issue affects Jenkins XebiaLabs XL Deploy Plugin. A CSRF vulnerability exists in the Credential#doValidateUserNamePassword form validation method that enables an attacker to initiate a connection to a server of the attacker’s choosing. Some connected sources also cite a missing...