Aller au contenu
Se connecter
Non notée

CVE-2019-1003027 A server-side request forgery vulnerability exists in Jenkins OctopusDeploy Plugin 1.8.1 and earlier in…

Description

A server-side request forgery vulnerability exists in Jenkins OctopusDeploy Plugin 1.8.1 and earlier in OctopusDeployPlugin.java that allows attackers with Overall/Read permission to have Jenkins connect to an attacker-specified URL and obtain the HTTP response code if successful, and exception error message otherwise.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins OctopusDeploy Plugin Versions non publiées

Autres CVE de Jenkins OctopusDeploy Plugin

Les 2 CVE de Jenkins OctopusDeploy Plugin →
CVE-2019-1003071 Jenkins OctopusDeploy Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where… Non notée
Suivre cette CVE