Description
A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
Remediation
References
https://jenkins.io/security/advisory/2018-06-04/#SECURITY-799
Related Vulnerabilities
CVE-2022-20612 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2023-30523 Vulnerability in maven package org.jenkins-ci.plugins:reportportal
CVE-2016-3093 Vulnerability in maven package ognl:ognl
CVE-2019-17558 Vulnerability in maven package org.apache.solr:solr-velocity
CVE-2019-12399 Vulnerability in maven package org.apache.kafka:kafka