Description
A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
Remediation
References
https://jenkins.io/security/advisory/2018-06-25/#SECURITY-819
Related Vulnerabilities
CVE-2023-30548 Vulnerability in npm package gatsby-plugin-sharp
CVE-2020-27822 Vulnerability in maven package io.opentracing.contrib:opentracing-interceptors
CVE-2023-45818 Vulnerability in maven package org.webjars.npm:tinymce
CVE-2023-40014 Vulnerability in npm package @openzeppelin/contracts-upgradeable
CVE-2017-5656 Vulnerability in maven package org.apache.cxf:cxf-rt-ws-security