Not rated

CVE-2019-1003082 A cross-site request forgery vulnerability in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form…

Description

A cross-site request forgery vulnerability in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Gearman Plugin	Versions not published

The 2 CVEs of Jenkins Gearman Plugin →

CVE-2019-1003083 A missing permission check in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form validation… Not rated

Do you use Jenkins Gearman Plugin?

Track this CVE Watch Jenkins Gearman Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-1003082

Timeline

Published April 4, 2019
Last modified August 5, 2024

References

107790 www.securityfocus.com
[oss-security] 20190413 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
jenkins.io jenkins.io

Track this CVE

CVE-2019-1003082 A cross-site request forgery vulnerability in Jenkins Gearman Plugin in the GearmanPluginConfig#doTestConnection form…

Description

Affected products and versions

Other CVEs of Jenkins Gearman Plugin