Not rated

CVE-2019-10279 A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form…

Description

A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins jenkins-reviewbot Plugin	Versions not published

The 2 CVEs of Jenkins jenkins-reviewbot Plugin →

CVE-2019-10278 A cross-site request forgery vulnerability in Jenkins jenkins-reviewbot Plugin in the… Not rated

Do you use Jenkins jenkins-reviewbot Plugin?

Track this CVE Watch Jenkins jenkins-reviewbot Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-10279

Timeline

Published April 4, 2019
Last modified August 4, 2024

References

107790 www.securityfocus.com
[oss-security] 20190413 Re: Multiple vulnerabilities in Jenkins plugins www.openwall.com
jenkins.io jenkins.io

Track this CVE

CVE-2019-10279 A missing permission check in Jenkins jenkins-reviewbot Plugin in the ReviewboardDescriptor#doTestConnection form…

Description

Affected products and versions

Other CVEs of Jenkins jenkins-reviewbot Plugin