CVE-2019-10304

Publication date

2019-04-18 16:54:18

Family

jenkins

State

PUBLISHED

Description

A cross-site request forgery vulnerability in Jenkins XebiaLabs XL Deploy Plugin in the Credential#doValidateUserNamePassword form validation method allows attackers to initiate a connection to an attacker-specified server.