Security Advisory

CVE-2019-10304

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-04-18 16:54:18
Last updated 2024-08-04 22:17:19
Assigner jenkins
State PUBLISHED

Description

A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers to initiate a connection to an attacker-specified server.