Description
A server-side request forgery vulnerability exists in Jenkins Confluence Publisher Plugin 2.0.1 and earlier in ConfluenceSite.java that allows attackers to have Jenkins submit login requests to an attacker-specified Confluence server URL with attacker specified credentials.
Remediation
References
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-982
Related Vulnerabilities
CVE-2023-32999 Vulnerability in maven package com.rapid7:jenkinsci-appspider-plugin
CVE-2023-1584 Vulnerability in maven package io.quarkus:quarkus-oidc
CVE-2018-5158 Vulnerability in maven package org.webjars.npm:pdfjs-dist
CVE-2021-34435 Vulnerability in npm package @theia/mini-browser
CVE-2023-24443 Vulnerability in maven package org.jenkins-ci.plugins:testcomplete