Description
A server-side request forgery vulnerability exists in Jenkins Confluence Publisher Plugin 2.0.1 and earlier in ConfluenceSite.java that allows attackers to have Jenkins submit login requests to an attacker-specified Confluence server URL with attacker specified credentials.
Remediation
References
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-982
Related Vulnerabilities
CVE-2023-4853 Vulnerability in maven package io.quarkus:quarkus-undertow
CVE-2023-37958 Vulnerability in maven package org.jenkins-ci.plugins:sumologic-publisher
CVE-2020-7015 Vulnerability in npm package kibana
CVE-2023-24444 Vulnerability in maven package org.jenkins-ci.plugins:openid
CVE-2023-33265 Vulnerability in maven package com.hazelcast:hazelcast-enterprise