Moderate severityNVD Advisory· Published Jun 26, 2018· Updated Sep 17, 2024
CVE-2018-1000606
CVE-2018-1000606
Description
A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:urltriggerMaven | < 0.43 | 0.43 |
Affected products
1Patches
Vulnerability mechanics
Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
5- github.com/advisories/GHSA-rv87-vcv4-fjvrghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2018-1000606ghsaADVISORY
- github.com/jenkinsci/urltrigger-plugin/commit/46220e69c220bacf8eb23911c8feba9dd68d1a26ghsaWEB
- github.com/jenkinsci/urltrigger-plugin/commit/aec43e370550b26636aa9cab0f23a5cbcffdc44fghsaWEB
- jenkins.io/security/advisory/2018-06-25/ghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.