Executive brief
Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery
Affected products
- Maven org.jenkins-ci.plugins:github-branch-source
Junglewise Threat Intelligence
CVE-2018-1000185: Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery
CVE-2018-1000185 · Severity: low · CVSS 3 · Published 2022-05-14
Technologies: org.jenkins-ci.plugins:github-branch-source (Maven). Vendors: Maven.
Related threats
- Jenkins GitHub Branch Source Plugin missing permission check in API endpoint
- Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test
- Jenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request Forgery
- Jenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDs