Description
A server-side request forgery vulnerability exists in Jenkins Confluence Publisher Plugin 2.0.1 and earlier in ConfluenceSite.java that allows attackers to have Jenkins submit login requests to an attacker-specified Confluence server URL with attacker specified credentials.
Remediation
References
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-982
Related Vulnerabilities
CVE-2010-3449 Vulnerability in maven package org.codehaus.redback:redback-system
CVE-2020-2265 Vulnerability in maven package org.jenkins-ci.plugins:covcomplplot
CVE-2019-10397 Vulnerability in maven package org.jenkins-ci.plugins:aqua-serverless
CVE-2018-6341 Vulnerability in npm package vue
CVE-2015-3269 Vulnerability in maven package org.apache.flex.blazeds:flex-messaging-core