cve/2019/CVE-2019-1003044.md
2024-05-26 14:27:05 +02:00

802 B

CVE-2019-1003044

Description

A cross-site request forgery vulnerability in Jenkins Slack Notification Plugin 2.19 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

POC

Reference

No PoCs from references.

Github