CVE-2018-1000184

A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
References
Configurations

Configuration 1

cpe:2.3:a:jenkins:github:*:*:*:*:*:jenkins:*:*

Information

Published : 2018-06-05 08:29

Updated : 2018-07-18 06:12


NVD link : CVE-2018-1000184

Mitre link : CVE-2018-1000184

Products Affected
No products.
CWE
CWE-918

Server-Side Request Forgery (SSRF)