CVE-2019-10389

A missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server...

CVE-2019-10389

The CVE-2019-10389 entry concerns Jenkins Relution Enterprise Appstore Publisher Plugin, affected in versions 1.24 and earlier. The root cause described across connected documents is a missing permission check that allows an attacker to trigger Jenkins to initiate an HTTP connection to an attacke...