Description
A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata of any arbitrary files on the Jenkins controller.
Remediation
References
http://www.openwall.com/lists/oss-security/2020/09/16/3
https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1904
Related Vulnerabilities
CVE-2021-32730 Vulnerability in maven package org.xwiki.platform:xwiki-platform-administration-ui
CVE-2013-7377 Vulnerability in npm package codem-transcode
CVE-2019-16572 Vulnerability in maven package org.jenkins-ci.plugins:weibo
CVE-2019-0212 Vulnerability in maven package org.apache.hbase:hbase-rest