CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2019/06/11 2:29 p.m.•27 views

CVE-2019-10331

A cross-site request forgery vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier in ConfigurationdoTestConnection allowed attackers to connect to an attacker-specified URL using attacker-specified credentials...

4.3CVSS4.5AI score0.01058EPSS

SaveExploits0References3

OSV•added 2019/06/11 2:29 p.m.•21 views

CVE-2019-10331

4.3CVSS6.6AI score

SaveExploits0References3

Cvelist•added 2019/06/11 1:15 p.m.•30 views

CVE-2019-10331

4.5AI score0.01058EPSS

SaveExploits0References3

CVE•added 2019/06/11 1:15 p.m.•85 views

CVE-2019-10331

CVE-2019-10331 affects Jenkins ElectricFlow Plugin 1.1.5 and earlier. The vulnerability stems from a missing permission check in a form validation method (Configuration#doTestConnection), enabling CSRF to trigger a connection test to an attacker-specified URL using attacker-specified credentials....

4.3CVSS4.5AI score0.01058EPSS

SaveExploits0References3Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by