Executive brief
Jenkins Job Import Plugin CSRF vulnerability
Affected products
- Maven org.jenkins-ci.plugins:job-import-plugin
Junglewise Threat Intelligence
CVE-2019-1003017: Jenkins Job Import Plugin CSRF vulnerability
CVE-2019-1003017 · Severity: low · CVSS 3 · Published 2022-05-13
Technologies: org.jenkins-ci.plugins:job-import-plugin (Maven). Vendors: Maven.
Related threats
- Jenkins Job Import Plugin missing permission check in HTTP endpoint
- Jenkins Job Import Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins
- XXE vulnerability in Jenkins Job Import Plugin
- Jenkins Job Import Plugin vulnerable to exposure of sensitive information