CVE-2018-1000013

Jenkins Release Plugin 2.9 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to trigger release builds...

CVE-2018-1000013

Jenkins Release Plugin 2.9 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to trigger release builds...

PT-2018-9204

Name of the Vulnerable Software and Affected Versions: Jenkins Release Plugin versions 2.9 and earlier Description: The issue allows attackers to trigger release builds due to a CSRF vulnerability. This is because form submissions are not required to be submitted via POST. Recommendations: For...

CVE-2018-1000013: Cross-Site Request Forgery (CSRF)

Jenkins Release Plugin 2.9 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to trigger release builds...