A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-06-05T20:00:00Z
Updated: 2024-09-17T01:26:35.606Z
Reserved: 2018-06-05T00:00:00Z
Link: CVE-2018-1000188
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2018-06-05T20:29:00.653
Modified: 2018-07-18T19:34:26.417
Link: CVE-2018-1000188
Redhat
No data.