CVE-2019-1003011

An information exposure and denial of service vulnerability exists in Jenkins Token Macro Plugin 2.5 and earlier in src/main/java/org/jenkinsci/plugins/tokenmacro/Parser.java, src/main/java/org/jenkinsci/plugins/tokenmacro/TokenMacro.java,...

CVE-2019-1003011

CVE-2019-1003011 affects Jenkins Token Macro Plugin 2.5 and earlier. Affected code paths in Parser.java, TokenMacro.java, AbstractChangesSinceMacro.java, ChangesSinceLastBuildMacro.java, and ProjectUrlMacro allow an attacker who can influence token macro input (e.g., SCM changelogs) to craft recu...

PT-2019-11309 · Jenkins · Jenkins Token Macro Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Token Macro Plugin versions 2.5 and earlier Description: An information exposure and denial of service issue exists that allows attackers with the ability to control token macro input to define recursive input, resulting in unexpected...