Description
A cross-site request forgery (CSRF) vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers to connect to an attacker-specified webserver using attacker-specified credentials.
Remediation
References
https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2737
Related Vulnerabilities
CVE-2020-13942 Vulnerability in maven package org.apache.unomi:unomi-kar
CVE-2017-15691 Vulnerability in maven package org.apache.uima:jvinci
CVE-2023-49583 Vulnerability in npm package @sap/xssec
CVE-2023-32695 Vulnerability in npm package socket.io-parser
CVE-2019-10336 Vulnerability in maven package org.jenkins-ci.plugins:electricflow