CVE-2018-1000414

A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java, FolderConfigFileAction.java that allows creating and editing configuration file definitions.
References
Link Resource
https://jenkins.io/security/advisory/2018-09-25/#SECURITY-938 Third Party Advisory
http://www.securityfocus.com/bid/106532 Third Party Advisory VDB Entry
Configurations

Configuration 1

cpe:2.3:a:jenkins:config_file_provider:*:*:*:*:*:jenkins:*:*

Information

Published : 2019-01-09 11:29

Updated : 2019-01-22 02:35


NVD link : CVE-2018-1000414

Mitre link : CVE-2018-1000414

Products Affected
No products.
CWE