CVE-2019-1003090

CVE-2019-1003090 : The issue is a cross-site request forgery in the Jenkins SOASTA CloudTest Plugin, specifically in the CloudTestServer.DescriptorImpl.doValidate form validation method, which allows an attacker to initiate a connection to an attacker-specified server. The connected documents con...

CVE-2019-1003091

A missing permission check in Jenkins SOASTA CloudTest Plugin in the CloudTestServer.DescriptorImpldoValidate form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

PT-2019-11380 · Jenkins · Jenkins Soasta Cloudtest Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins SOASTA CloudTest Plugin affected versions not specified Description: A cross-site request forgery issue exists in the CloudTestServer.DescriptorImpldoValidate form validation method, allowing attackers to initiate a connection to an...