Description
A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java that allows attackers to have Jenkins send HTTP requests to an attacker-specified host.
Remediation
References
http://www.securityfocus.com/bid/104960
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-994
Related Vulnerabilities
CVE-2021-23343 Vulnerability in npm package path-parse
CVE-2022-36527 Vulnerability in maven package com.jflyfox:jflyfox_jfinal
CVE-2022-36909 Vulnerability in maven package org.jenkins-ci.plugins:openshift-deployer
CVE-2018-25079 Vulnerability in npm package is-url
CVE-2022-29167 Vulnerability in maven package org.webjars.npm:hawk