Description
A cross-site request forgery vulnerability in a connection test form method in Jenkins Maven Release Plugin 0.16.1 and earlier allows attackers to have Jenkins connect to an attacker specified web server and parse XML documents.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/12/17/1
https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1681
Related Vulnerabilities
CVE-2021-21293 Vulnerability in maven package org.http4s:blaze-core_2.11
CVE-2020-2232 Vulnerability in maven package org.jenkins-ci.plugins:email-ext
CVE-2023-34617 Vulnerability in maven package com.owlike:genson
CVE-2021-36374 Vulnerability in maven package org.apache.ant:ant
CVE-2023-28444 Vulnerability in npm package angular-server-side-configuration