CVE-2019-10310

Summary: CVE-2019-10310 affects the Jenkins Ansible Tower Plugin (versions up to 0.9.1). The issue stems from a missing permissions check in the TowerInstallation.doTestTowerConnection form validation, allowing a user to cause the plugin to connect to an attacker-controlled URL using attacker-pro...