CVE-2019-10315 Jenkins GitHub Authentication Plugin 0.31 and earlier did not use the state parameter of OAuth to prevent CSRF

Description

Jenkins GitHub Authentication Plugin 0.31 and earlier did not use the state parameter of OAuth to prevent CSRF.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins GitHub Authentication Plugin	Versions non publiées

Autres CVE de Jenkins GitHub Authentication Plugin

Les 3 CVE de Jenkins GitHub Authentication Plugin →

CVE-2019-1003018 An exposure of sensitive information vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in… Non notée CVE-2019-1003019 An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in… Non notée