CVE-2019-1003007

A cross-site request forgery vulnerability exists in Jenkins Warnings Plugin 5.0.0 and earlier in src/main/java/hudson/plugins/warnings/GroovyParser.java that allows attackers to execute arbitrary code via a form validation HTTP endpoint.
Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:warnings:*:*:*:*:*:jenkins:*:*

History

25 Oct 2023, 18:16

Type Values Removed Values Added
References
  • {'url': 'https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1295%20(1)', 'name': 'https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1295%20(1)', 'tags': ['Vendor Advisory'], 'refsource': 'CONFIRM'}
  • (MISC) https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1295%20%281%29 -

Information

Published : 2019-02-06 16:29

Updated : 2024-02-28 16:48


NVD link : CVE-2019-1003007

Mitre link : CVE-2019-1003007

CVE.ORG link : CVE-2019-1003007


JSON object : View

Products Affected

jenkins

  • warnings
CWE
CWE-352

Cross-Site Request Forgery (CSRF)