Description
A cross-site request forgery vulnerability in Jenkins VMware Lab Manager Slaves Plugin in the LabManager.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.
Remediation
References
http://www.securityfocus.com/bid/107790
https://jenkins.io/security/advisory/2019-04-03/#SECURITY-979
Related Vulnerabilities
CVE-2023-31717 Vulnerability in npm package @frangoteam/fuxa
CVE-2019-12043 Vulnerability in maven package org.webjars.npm:remarkable
CVE-2020-28052 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk15on
CVE-2023-1283 Vulnerability in npm package @builder.io/qwik
CVE-2016-4467 Vulnerability in maven package org.apache.qpid:proton-project