CVE-2018-1000414

A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java, FolderConfigFileAction.java that allows creating and editing configuration file definitions.

Score

CVSS 3.0 8.1 High

Status

Modified - cve@mitre.org

Published

2019-01-09

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Config File Provider (Jenkins)

References

• http://www.securityfocus.com/bid/106532
• https://jenkins.io/security/advisory/2018-09-25/#SECURITY-938