~ / search / GHSA-pwvj-6phx-qv8c

GHSA-pwvj-6phx-qv8c

CSRF vulnerability in Jenkins Translation Assistance plugin

Source: GitHub Advisory Database (reviewed) High CVE-2018-1000014

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:translation < 1.16 1.16

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Translation Assistance Plugin 1.15 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to override localized strings displayed to all users on the current Jenkins instance if the victim is a Jenkins administrator.

References

External links from the advisory. They lead to third-party sites.