Executive brief
Jenkins ElectricFlow Plugin cross-site request forgery vulnerability
Affected products
- Maven org.jenkins-ci.plugins:electricflow
Junglewise Threat Intelligence
CVE-2019-10331: Jenkins ElectricFlow Plugin cross-site request forgery vulnerability
CVE-2019-10331 · Severity: low · CVSS 3 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:electricflow (Maven). Vendors: Maven.
Related threats
- Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion
- Jenkins CloudBees CD Plugin vulnerable to arbitrary file read
- Jenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation
- Jenkins ElectricFlow Plugin missing permission check
- Jenkins ElectricFlow Plugin is vulnerable to reflected cross site scripting vulnerability