Not rated

CVE-2019-1003020 A server-side request forgery vulnerability exists in Jenkins Kanboard Plugin 1.5.10 and earlier in…

Description

A server-side request forgery vulnerability exists in Jenkins Kanboard Plugin 1.5.10 and earlier in KanboardGlobalConfiguration.java that allows attackers with Overall/Read permission to submit a GET request to an attacker-specified URL.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Kanboard Plugin	Versions not published

Do you use Jenkins Kanboard Plugin?

Track this CVE Watch Jenkins Kanboard Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2019-1003020

Timeline

Published February 6, 2019
Last modified September 17, 2024

References

jenkins.io jenkins.io

Track this CVE