Description
A cross-site request forgery (CSRF) vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials.
Remediation
References
https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2737
Related Vulnerabilities
CVE-2014-3652 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2017-11479 Vulnerability in npm package kibana
CVE-2023-25572 Vulnerability in npm package ra-ui-materialui
CVE-2023-44487 Vulnerability in maven package org.eclipse.jetty.http2:http2-common
CVE-2022-31175 Vulnerability in npm package @ckeditor/ckeditor5-html-support