Relution Enterprise Appstore Publisher Jenkins Plugin contains Cross-Site Request Forgery

A cross-site request forgery vulnerability in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server...

Missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin

A missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server...

CloudBees Jenkins Relution Enterprise Appstore Publisher Plugin Authorization Issues Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Relution Enterprise Appstore Publisher Plugin...

Cross site request forgery (csrf)

A cross-site request forgery vulnerability in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server...

CVE-2019-10388

The CVE-2019-10388 issue affects Jenkins Relution Enterprise Appstore Publisher Plugin (versions 1.24 and earlier). It is a cross-site request forgery (CSRF) vulnerability that could allow an attacker to cause Jenkins to initiate an HTTP connection to an attacker-controlled server. Impact is desc...

CVE-2019-10281

Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...