CVE-2018-1000600

The Jenkins GitHub Plugin (version 1.29.1 and earlier) is vulnerable to a Server-Side Request Forgery (SSRF) and exposure of sensitive information in the GitHubTokenCredentialsCreator.java file. The root cause is a failure to properly detect access rights, allowing an attacker to use attacker-spe...