Description
A cross-site request forgery vulnerability in Jenkins Mantis Plugin 0.26 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Jenkins project Jenkins Mantis Plugin
unspecified to ≤ 0.26affectednext of 0.26 to < unspecifiedunknown