PT-2019-8728 · Jenkins · Jenkins Email Extension Template Plugin+1

Daniel Beck

·

CVE-2018-1000417

·

Publicado

2019-01-09

·

Atualizado

2022-05-14

CVSS v3.1

8.1

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions Jenkins Email Extension Template Plugin version 1.0 and earlier
Description A cross-site request forgery issue exists in the ExtEmailTemplateManagement.java file, allowing unauthorized creation or removal of templates.
Recommendations For Jenkins Email Extension Template Plugin version 1.0 and earlier, consider disabling the ExtEmailTemplateManagement.java functionality until a patch is available to prevent unauthorized template creation or removal.

Correção

CSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2018-1000417
GHSA-4M38-GQH8-X266

Produtos afetados

Jenkins
Jenkins Email Extension Template Plugin