Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-16569

A cross-site request forgery vulnerability in Jenkins Mantis Plugin 0.26 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified creden

Description

A cross-site request forgery vulnerability in Jenkins Mantis Plugin 0.26 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Jenkins project Jenkins Mantis Plugin

  • unspecified to ≤ 0.26affected
  • next of 0.26 to < unspecifiedunknown

References