CVE-2018-1000014

Name of the Vulnerable Software and Affected Versions: Jenkins Translation Assistance Plugin versions 1.15 and earlier

Description: The issue allows attackers to override localized strings displayed to all users on the current Jenkins instance if the victim is a Jenkins administrator, due to a CSRF vulnerability resulting from not requiring form submissions to be submitted via POST.

Recommendations: For Jenkins Translation Assistance Plugin versions 1.15 and earlier, update to a version that requires form submissions to be submitted via POST to mitigate the risk of CSRF attacks.