Jenkins Maven Release Plugin contains Cross-Site Request Forgery vulnerability

A cross-site request forgery vulnerability in Jenkins Maven Release Plugin prior to 0.15.0 in the M2ReleaseActiondoSubmit method allowed attackers to perform releases with attacker-specified options...