CVE-2019-10441

Summary

A cross-site request forgery vulnerability in Jenkins iceScrum Plugin 1.1.5 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins iceScrum Plugin1.1.5 and earlieraffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References