Description
A cross-site request forgery (CSRF) vulnerability in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.
Remediation
References
https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1903
http://www.openwall.com/lists/oss-security/2020/09/16/3
Related Vulnerabilities
CVE-2023-34455 Vulnerability in maven package org.xerial.snappy:snappy-java
CVE-2023-34238 Vulnerability in npm package gatsby-transformer-remark
CVE-2015-8859 Vulnerability in npm package send
CVE-2021-44667 Vulnerability in maven package com.alibaba.nacos:nacos-common
CVE-2021-40690 Vulnerability in maven package org.apache.santuario:xmlsec