CVE-2019-1003010

A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows…

published February 6, 2019

CVSS
—
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows attackers to create a Git tag in a workspace and attach corresponding metadata to a build record.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01145 · 66.5th percentile
Published
2019-02-06T16:00Z
EPSS history
Timeline
  • 06 FEB 16:00Z
    A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows…
    cvelistv5