Description
A cross-site request forgery vulnerability in Jenkins Artifactory Plugin 3.2.2 and earlier in ArtifactoryBuilder.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Remediation
References
Related Vulnerabilities
WordPress Plugin Livefyre Comments 3 Cross-Site Scripting (4.1.4)
WordPress Plugin Ocean Extra Security Bypass (1.5.8)
Claroline Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-3262)
WordPress Plugin Contact Form Email Multiple Vulnerabilities (1.2.65)
Moodle Improper Authentication Vulnerability (CVE-2018-1082)