~ / search / GHSA-vmvp-2hhx-rgm8

GHSA-vmvp-2hhx-rgm8

Cross-Site Request Forgery in Jenkins Gerrit Trigger Plugin

Source: GitHub Advisory Database (reviewed) High CVE-2019-16551

Packages

EcosystemPackageAffectedFixed in
Maven com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger < 2.30.2 2.30.2

Details

As written in the advisory (Markdown source, shown as plain text).

A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials.

References

External links from the advisory. They lead to third-party sites.