Description
A server-side request forgery vulnerability exists in Jenkins Confluence Publisher Plugin 2.0.1 and earlier in ConfluenceSite.java that allows attackers to have Jenkins submit login requests to an attacker-specified Confluence server URL with attacker specified credentials.
Remediation
References
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-982
Related Vulnerabilities
CVE-2022-43396 Vulnerability in maven package org.apache.kylin:kylin-core-common
CVE-2017-2582 Vulnerability in maven package org.keycloak:keycloak-saml-core
CVE-2016-5007 Vulnerability in maven package org.springframework.security:spring-security-web
CVE-2019-1003032 Vulnerability in maven package org.jenkins-ci.plugins:email-ext