CVE-2019-1003008
06.02.2019, 16:29
A cross-site request forgery vulnerability exists in Jenkins Warnings Next Generation Plugin 2.1.1 and earlier in src/main/java/io/jenkins/plugins/analysis/warnings/groovy/GroovyParser.java that allows attackers to execute arbitrary code via a form validation HTTP endpoint.
| Vendor | Product | Version |
|---|---|---|
| jenkins | warnings_next_generation | 𝑥 ≤ 2.1.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration