CVE-2018-1000414

A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java…

published January 9, 2019

CVSS
—
EPSS
1%
Percentile
57.3
In the wild
Unconfirmed
What it is

A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java, FolderConfigFileAction.java that allows creating and editing configuration file definitions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00835 · 57.3th percentile
Published
2019-01-09T23:00Z
EPSS history
Timeline
  • 09 JAN 23:00Z
    A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java…
    cvelistv5