Jenkins Poll SCM Plugin CVE-2017-1000093 Cross Site Request Forgery Vulnerability
BID:100327
Info
Jenkins Poll SCM Plugin CVE-2017-1000093 Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 100327 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-1000093 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 10 2017 12:00AM |
| Updated: | Jul 10 2017 12:00AM |
| Credit: | Daniel Beck, CloudBees, Inc. |
| Vulnerable: |
Jenkins-Ci Poll SCM Plugin 1.3 |
| Not Vulnerable: |
Jenkins-Ci Poll SCM Plugin 1.3.1 |
Exploit / POC
Jenkins Poll SCM Plugin CVE-2017-1000093 Cross Site Request Forgery Vulnerability
To exploit this issue, an attacker must entice an unsuspecting victim to follow a malicious URI.
To exploit this issue, an attacker must entice an unsuspecting victim to follow a malicious URI.
References
Jenkins Poll SCM Plugin CVE-2017-1000093 Cross Site Request Forgery Vulnerability
References:
References:
- Jenkins CI Homepage (Jenkins CI)
- Jenkins Security Advisory 2017-07-10 (Jenkins)