CVE-2019-10315 Jenkins GitHub Authentication Plugin 0.31 and earlier did not use the state parameter of OAuth to prevent CSRF

Description

Jenkins GitHub Authentication Plugin 0.31 and earlier did not use the state parameter of OAuth to prevent CSRF.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins GitHub Authentication Plugin	Versions not published

Other CVEs of Jenkins GitHub Authentication Plugin

The 3 CVEs of Jenkins GitHub Authentication Plugin →

CVE-2019-1003018 An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in… Not rated CVE-2019-1003019 An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in… Not rated