CVE-2019-10454

Summary

A cross-site request forgery vulnerability in Jenkins Rundeck Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins Rundeck Plugin3.6.5 and earlieraffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References