High severityNVD Advisory· Published Jul 11, 2019· Updated Aug 4, 2024

CVE-2019-10340

Description

A CSRF vulnerability in Jenkins Docker Plugin 1.1.6 and earlier allows users with Overall/Read access to capture credentials by connecting to an attacker-specified URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

A CSRF vulnerability in Jenkins Docker Plugin 1.1.6 and earlier allows users with Overall/Read access to capture credentials by connecting to an attacker-specified URL.

The Jenkins Docker Plugin version 1.1.6 and earlier contained a cross-site request forgery (CSRF) vulnerability in the DockerAPI.DescriptorImpl#doTestConnection method. This method performed form validation without requiring a POST request, making it susceptible to CSRF attacks. Additionally, it lacked proper permission checks, allowing users with only Overall/Read access to trigger the action [1][3].

An attacker could exploit this by tricking an authenticated user into visiting a malicious page while logged into Jenkins. The attacker would need to first obtain valid credential IDs through another vulnerability, such as the credential enumeration issue (CVE-2019-10342) also found in the same plugin [3]. Using the CSRF, the attacker could force the victim's browser to send a crafted request to connect to an attacker-controlled URL using those credential IDs.

Successful exploitation allowed the attacker to capture Jenkins-stored credentials handled by the Docker Plugin. The attacker could then use the captured credentials for further unauthorized access. The vulnerability had a CVSS v3 base score of 6.5 (Medium) [3].

The vulnerability was fixed in Docker Plugin version 1.1.7, released on July 11, 2019 [3][4]. The fix requires both proper permission checks (Overall/Administer or Item/Configure) and POST requests for the form validation endpoint. Users are strongly advised to upgrade to the latest version.

References

AI Insight generated on May 22, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
io.jenkins.docker:docker-pluginMaven	< 1.1.7	1.1.7

Affected products

ghsa-coords
pkg:maven/io.jenkins.docker/docker-plugin
Range: < 1.1.7
Jenkins Project/Jenkins Xp Dev Plugincpe-rescue
Range: 1.1.6 and earlier

Patches

6ad27199f6fa

[SECURITY-1010]

https://github.com/jenkinsci/docker-pluginPeter DartonJul 10, 2019via ghsa

commit

8 files changed · +122 −134

src/main/java/com/nirima/jenkins/plugins/docker/builder/DockerBuilderNewTemplate.java+0 −24 modified

@@ -1,27 +1,16 @@
 package com.nirima.jenkins.plugins.docker.builder;
 
-import com.cloudbees.jenkins.plugins.sshcredentials.SSHAuthenticator;
-import com.cloudbees.jenkins.plugins.sshcredentials.SSHUserListBoxModel;
-import com.cloudbees.plugins.credentials.CredentialsProvider;
-import com.cloudbees.plugins.credentials.common.StandardUsernameCredentials;
 import com.nirima.jenkins.plugins.docker.DockerCloud;
 import com.nirima.jenkins.plugins.docker.DockerTemplate;
-import com.trilead.ssh2.Connection;
 import hudson.Extension;
 import hudson.Launcher;
 import hudson.model.AbstractBuild;
 import hudson.model.AbstractProject;
 import hudson.model.BuildListener;
-import hudson.model.ItemGroup;
-import hudson.plugins.sshslaves.SSHLauncher;
-import hudson.security.ACL;
-import hudson.security.AccessControlled;
 import hudson.slaves.Cloud;
 import hudson.tasks.BuildStepDescriptor;
 import hudson.tasks.Builder;
-import hudson.util.ListBoxModel;
 import jenkins.model.Jenkins;
-import org.kohsuke.stapler.AncestorInPath;
 import org.kohsuke.stapler.DataBoundConstructor;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
@@ -85,7 +74,6 @@ public DescriptorImpl getDescriptor() {
 
     @Extension
     public static class DescriptorImpl extends BuildStepDescriptor<Builder> {
-
         @Override
         public boolean isApplicable(Class<? extends AbstractProject> jobType) {
             return true;
@@ -95,17 +83,5 @@ public boolean isApplicable(Class<? extends AbstractProject> jobType) {
         public String getDisplayName() {
             return "Add a new template to all docker clouds";
         }
-
-        public ListBoxModel doFillCredentialsIdItems(@AncestorInPath ItemGroup context) {
-
-            AccessControlled ac = (context instanceof AccessControlled ? (AccessControlled) context : Jenkins.getInstance());
-            if (!ac.hasPermission(Jenkins.ADMINISTER)) {
-                return new ListBoxModel();
-            }
-
-            return new SSHUserListBoxModel().withMatching(SSHAuthenticator.matcher(Connection.class),
-                    CredentialsProvider.lookupCredentials(StandardUsernameCredentials.class, context,
-                            ACL.SYSTEM, SSHLauncher.SSH_SCHEME));
-        }
     }
 }

src/main/java/com/nirima/jenkins/plugins/docker/DockerManagementServer.java+13 −5 modified

@@ -11,19 +11,21 @@
 import org.kohsuke.stapler.QueryParameter;
 import org.kohsuke.stapler.StaplerRequest;
 import org.kohsuke.stapler.StaplerResponse;
+import org.kohsuke.stapler.interceptor.RequirePOST;
 
-import javax.servlet.ServletException;
 import java.io.IOException;
 import java.util.Collection;
+import java.util.Collections;
 import java.util.Date;
 
 /**
  * Created by magnayn on 22/02/2014.
  */
-public class DockerManagementServer  implements Describable<DockerManagementServer> {
+public class DockerManagementServer implements Describable<DockerManagementServer> {
     final String name;
     final DockerCloud theCloud;
 
+    @Override
     public Descriptor<DockerManagementServer> getDescriptor() {
         return Jenkins.getInstance().getDescriptorByType(DescriptorImpl.class);
     }
@@ -38,6 +40,9 @@ public DockerManagementServer(String name) {
     }
 
     public Collection getImages(){
+        if ( !Jenkins.getInstance().hasPermission(Jenkins.ADMINISTER) ) {
+            return Collections.emptyList();
+        }
         final DockerAPI dockerApi = theCloud.getDockerApi();
         try(final DockerClient client = dockerApi.getClient()) {
             return client.listImagesCmd().exec();
@@ -47,6 +52,9 @@ public Collection getImages(){
     }
 
     public Collection getProcesses() {
+        if ( !Jenkins.getInstance().hasPermission(Jenkins.ADMINISTER) ) {
+            return Collections.emptyList();
+        }
         final DockerAPI dockerApi = theCloud.getDockerApi();
         try(final DockerClient client = dockerApi.getClient()) {
             return client.listContainersCmd().exec();
@@ -67,9 +75,9 @@ public String getJsUrl(String jsName) {
         return Consts.PLUGIN_JS_URL + jsName;
     }
 
-    public void doControlSubmit(@QueryParameter("stopId") String stopId, StaplerRequest req, StaplerResponse rsp) throws ServletException,
-            IOException,
-            InterruptedException {
+    @RequirePOST
+    public void doControlSubmit(@QueryParameter("stopId") String stopId, StaplerRequest req, StaplerResponse rsp) throws IOException {
+        Jenkins.getInstance().checkPermission(Jenkins.ADMINISTER);
         final DockerAPI dockerApi = theCloud.getDockerApi();
         try(final DockerClient client = dockerApi.getClient()) {
             client.stopContainerCmd(stopId).exec();

src/main/java/com/nirima/jenkins/plugins/docker/DockerSimpleTemplate.java+0 −14 modified

@@ -1,11 +1,7 @@
 package com.nirima.jenkins.plugins.docker;
 
 import hudson.Extension;
-import hudson.model.Item;
-import hudson.util.ListBoxModel;
 import jenkins.model.Jenkins;
-import org.jenkinsci.plugins.docker.commons.credentials.DockerRegistryEndpoint;
-import org.kohsuke.stapler.AncestorInPath;
 
 /**
  * A simple template storage.
@@ -58,19 +54,9 @@ public DescriptorImpl getDescriptor() {
 
     @Extension
     public static final class DescriptorImpl extends DockerTemplateBase.DescriptorImpl {
-
         @Override
         public String getDisplayName() {
             return "Docker Template";
         }
-
-        public ListBoxModel doFillPullCredentialsIdItems(@AncestorInPath Item item) {
-            final DockerRegistryEndpoint.DescriptorImpl descriptor =
-                    (DockerRegistryEndpoint.DescriptorImpl)
-                            Jenkins.getInstance().getDescriptorOrDie(DockerRegistryEndpoint.class);
-            return descriptor.doFillCredentialsIdItems(item);
-        }
-
-
     }
 }

src/main/java/com/nirima/jenkins/plugins/docker/DockerTemplateBase.java+2 −35 modified

@@ -1,9 +1,5 @@
 package com.nirima.jenkins.plugins.docker;
 
-import com.cloudbees.jenkins.plugins.sshcredentials.SSHAuthenticator;
-import com.cloudbees.jenkins.plugins.sshcredentials.SSHUserListBoxModel;
-import com.cloudbees.plugins.credentials.CredentialsProvider;
-import com.cloudbees.plugins.credentials.common.StandardUsernameCredentials;
 import com.github.dockerjava.api.command.CreateContainerCmd;
 import com.github.dockerjava.api.model.Bind;
 import com.github.dockerjava.api.model.PortBinding;
@@ -17,16 +13,11 @@
 import com.google.common.base.Strings;
 import com.google.common.collect.Iterables;
 import com.nirima.jenkins.plugins.docker.utils.JenkinsUtils;
-import com.trilead.ssh2.Connection;
 import hudson.Extension;
 import hudson.Util;
 import hudson.model.Describable;
 import hudson.model.Descriptor;
 import hudson.model.Item;
-import hudson.model.ItemGroup;
-import hudson.plugins.sshslaves.SSHLauncher;
-import hudson.security.ACL;
-import hudson.security.AccessControlled;
 import hudson.util.FormValidation;
 import hudson.util.ListBoxModel;
 import jenkins.model.Jenkins;
@@ -742,9 +733,7 @@ public FormValidation doCheckVolumesString(@QueryParameter String volumesString)
             } catch (Throwable t) {
                 return FormValidation.error(t.getMessage());
             }
-
             return FormValidation.ok();
-
         }
 
         public FormValidation doCheckVolumesFromString(@QueryParameter String volumesFromString) {
@@ -756,7 +745,6 @@ public FormValidation doCheckVolumesFromString(@QueryParameter String volumesFro
             } catch (Throwable t) {
                 return FormValidation.error(t.getMessage());
             }
-
             return FormValidation.ok();
         }
 
@@ -767,40 +755,19 @@ public FormValidation doCheckExtraHostsString(@QueryParameter String extraHostsS
                     return FormValidation.error("Wrong extraHost {}", extraHost);
                 }
             }
-
             return FormValidation.ok();
         }
 
-
-        public ListBoxModel doFillPullCredentialsIdItems(@AncestorInPath Item item) {
+        public ListBoxModel doFillPullCredentialsIdItems(@AncestorInPath Item context) {
             final DockerRegistryEndpoint.DescriptorImpl descriptor =
                     (DockerRegistryEndpoint.DescriptorImpl)
                             Jenkins.getInstance().getDescriptorOrDie(DockerRegistryEndpoint.class);
-            return descriptor.doFillCredentialsIdItems(item);
-        }
-
-
-        public static ListBoxModel doFillCredentialsIdItems(@AncestorInPath ItemGroup context) {
-
-            AccessControlled ac = (context instanceof AccessControlled ? (AccessControlled) context : Jenkins.getInstance());
-            if (!ac.hasPermission(Jenkins.ADMINISTER)) {
-                return new ListBoxModel();
-            }
-
-            return new SSHUserListBoxModel().withMatching(
-                    SSHAuthenticator.matcher(Connection.class),
-                    CredentialsProvider.lookupCredentials(
-                            StandardUsernameCredentials.class,
-                            context,
-                            ACL.SYSTEM,
-                            SSHLauncher.SSH_SCHEME)
-            );
+            return descriptor.doFillCredentialsIdItems(context);
         }
 
         @Override
         public String getDisplayName() {
             return "Docker template base";
         }
     }
-
 }

src/main/java/io/jenkins/docker/client/DockerAPI.java+47 −10 modified

@@ -1,6 +1,5 @@
 package io.jenkins.docker.client;
 
-import com.cloudbees.plugins.credentials.common.StandardListBoxModel;
 import com.cloudbees.plugins.credentials.domains.DomainRequirement;
 import com.github.dockerjava.api.DockerClient;
 import com.github.dockerjava.api.command.VersionCmd;
@@ -12,9 +11,8 @@
 import hudson.Extension;
 import hudson.model.AbstractDescribableImpl;
 import hudson.model.Descriptor;
-import hudson.model.ItemGroup;
+import hudson.model.Item;
 import hudson.security.ACL;
-import hudson.security.AccessControlled;
 import hudson.util.FormValidation;
 import hudson.util.ListBoxModel;
 import jenkins.model.Jenkins;
@@ -24,6 +22,7 @@
 import org.kohsuke.stapler.DataBoundConstructor;
 import org.kohsuke.stapler.DataBoundSetter;
 import org.kohsuke.stapler.QueryParameter;
+import org.kohsuke.stapler.interceptor.RequirePOST;
 import org.newsclub.net.unix.AFUNIXSocket;
 import org.newsclub.net.unix.AFUNIXSocketAddress;
 import org.slf4j.Logger;
@@ -318,14 +317,17 @@ public int hashCode() {
     @Extension
     public static class DescriptorImpl extends Descriptor<DockerAPI> {
 
-        public ListBoxModel doFillCredentialsIdItems(@AncestorInPath ItemGroup context, @QueryParameter String value) {
-            AccessControlled ac = (context instanceof AccessControlled ? (AccessControlled) context : Jenkins.getInstance());
-            if (!ac.hasPermission(Jenkins.ADMINISTER)) {
-                return new StandardListBoxModel().includeCurrentValue(value);
+        public ListBoxModel doFillCredentialsIdItems(@AncestorInPath Item context, @QueryParameter String uri) {
+            final DockerServerEndpoint.DescriptorImpl descriptor = (DockerServerEndpoint.DescriptorImpl) Jenkins.getInstance().getDescriptorOrDie(DockerServerEndpoint.class);
+            return descriptor.doFillCredentialsIdItems(context, uri);
+        }
+
+        public FormValidation doCheckCredentialsId(@AncestorInPath Item context, @QueryParameter String uri, @QueryParameter String value) {
+            final String credentialsOrNull = trimToNull(value);
+            if ( credentialsOrNull==null || credentialsAreValid(context, uri, credentialsOrNull)) {
+                return FormValidation.ok();
             }
-            return new StandardListBoxModel().includeAs(
-                    ACL.SYSTEM, context, DockerServerCredentials.class,
-                    Collections.<DomainRequirement>emptyList());
+            return FormValidation.error("Invalid credentials for URI " + uri);
         }
 
         public FormValidation doCheckConnectionTimeout(@QueryParameter String value) {
@@ -336,13 +338,20 @@ public FormValidation doCheckReadTimeout(@QueryParameter String value) {
             return FormValidation.validateNonNegativeInteger(value);
         }
 
+        @RequirePOST
         public FormValidation doTestConnection(
+                @AncestorInPath Item context,
                 @QueryParameter String uri,
                 @QueryParameter String credentialsId,
                 @QueryParameter String apiVersion,
                 @QueryParameter int connectTimeout,
                 @QueryParameter int readTimeout
         ) {
+            throwIfNoPermission(context);
+            final FormValidation credentialsIdCheckResult = doCheckCredentialsId(context, uri, credentialsId);
+            if (credentialsIdCheckResult != FormValidation.ok()) {
+                return FormValidation.error("Invalid credentials");
+            }
             try {
                 final DockerServerEndpoint dsep = new DockerServerEndpoint(uri, credentialsId);
                 final DockerAPI dapi = new DockerAPI(dsep, connectTimeout, readTimeout, apiVersion, null);
@@ -357,5 +366,33 @@ public FormValidation doTestConnection(
                 return FormValidation.error(e, e.getMessage());
             }
         }
+
+        private boolean credentialsAreValid(Item context, String uri, final String credentialsId) {
+            final ListBoxModel availableCredentials = doFillCredentialsIdItems(context, uri);
+            return optionIsAvailable(credentialsId, availableCredentials);
+        }
+
+        private boolean optionIsAvailable(final String optionValue, final ListBoxModel available) {
+            for (ListBoxModel.Option o : available) {
+                if (o.value == null) {
+                    if (optionValue == null) {
+                        return true; // both null = match
+                    }
+                } else {
+                    if (optionValue != null && optionValue.equals(o.value)) {
+                        return true;
+                    }
+                }
+            }
+            return false;
+        }
+
+        private void throwIfNoPermission(Item context) {
+            if (context != null) {
+                context.checkPermission(Item.CONFIGURE);
+            } else {
+                Jenkins.getInstance().checkPermission(Jenkins.ADMINISTER);
+            }
+        }
     }
 }

src/main/java/io/jenkins/docker/connector/DockerComputerSSHConnector.java+29 −4 modified

@@ -1,26 +1,29 @@
 package io.jenkins.docker.connector;
 
+import com.cloudbees.jenkins.plugins.sshcredentials.SSHAuthenticator;
 import com.cloudbees.jenkins.plugins.sshcredentials.impl.BasicSSHUserPrivateKey;
 import com.cloudbees.plugins.credentials.CredentialsScope;
 import com.cloudbees.plugins.credentials.common.StandardUsernameCredentials;
+import com.cloudbees.plugins.credentials.common.StandardUsernameListBoxModel;
 import com.github.dockerjava.api.DockerClient;
 import com.github.dockerjava.api.command.CreateContainerCmd;
 import com.github.dockerjava.api.command.InspectContainerResponse;
 import com.github.dockerjava.api.model.ExposedPort;
 import com.github.dockerjava.api.model.NetworkSettings;
 import com.github.dockerjava.api.model.PortBinding;
 import com.github.dockerjava.api.model.Ports;
-import com.nirima.jenkins.plugins.docker.DockerTemplateBase;
 import com.nirima.jenkins.plugins.docker.utils.PortUtils;
+import com.trilead.ssh2.Connection;
 import com.trilead.ssh2.signature.RSAKeyAlgorithm;
 import hudson.Extension;
 import hudson.model.AbstractDescribableImpl;
 import hudson.model.Descriptor;
-import hudson.model.ItemGroup;
+import hudson.model.Item;
 import hudson.model.TaskListener;
 import hudson.plugins.sshslaves.SSHLauncher;
 import hudson.plugins.sshslaves.verifiers.NonVerifyingKeyVerificationStrategy;
 import hudson.plugins.sshslaves.verifiers.SshHostKeyVerificationStrategy;
+import hudson.security.ACL;
 import hudson.slaves.ComputerLauncher;
 import hudson.util.ListBoxModel;
 import io.jenkins.docker.client.DockerAPI;
@@ -33,6 +36,7 @@
 import org.kohsuke.stapler.AncestorInPath;
 import org.kohsuke.stapler.DataBoundConstructor;
 import org.kohsuke.stapler.DataBoundSetter;
+import org.kohsuke.stapler.QueryParameter;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 
@@ -44,6 +48,7 @@
 import java.io.InputStream;
 import java.net.InetSocketAddress;
 import java.net.URI;
+import java.util.Collections;
 import java.util.List;
 import java.util.Map;
 import java.util.concurrent.TimeUnit;
@@ -419,8 +424,28 @@ public String getDisplayName() {
                 return "Use configured SSH credentials";
             }
 
-            public ListBoxModel doFillCredentialsIdItems(@AncestorInPath ItemGroup context) {
-                return DockerTemplateBase.DescriptorImpl.doFillCredentialsIdItems(context);
+            public ListBoxModel doFillCredentialsIdItems(@AncestorInPath Item context, @QueryParameter String credentialsId) {
+                if ( !hasPermission(context)) {
+                    return new StandardUsernameListBoxModel()
+                            .includeCurrentValue(credentialsId);
+                }
+                // Functionally the same as SSHLauncher's descriptor method, but without
+                // filtering by host/port as we don't/can't know those yet.
+                return new StandardUsernameListBoxModel()
+                        .includeMatchingAs(
+                                ACL.SYSTEM,
+                                context,
+                                StandardUsernameCredentials.class,
+                                Collections.emptyList(),
+                                SSHAuthenticator.matcher(Connection.class))
+                        .includeCurrentValue(credentialsId);
+            }
+
+            private boolean hasPermission(Item context) {
+                if (context != null) {
+                    return context.hasPermission(Item.CONFIGURE);
+                }
+                return Jenkins.getInstance().hasPermission(Jenkins.ADMINISTER);
             }
         }
     }

src/main/java/io/jenkins/docker/pipeline/DockerNodeStep.java+1 −1 modified

@@ -106,7 +106,7 @@ public String getDisplayName() {
         }
 
         public ListBoxModel doFillCredentialsIdItems(@AncestorInPath Item item, @QueryParameter String uri) {
-            DockerServerEndpoint.DescriptorImpl descriptor = (DockerServerEndpoint.DescriptorImpl) Jenkins.getInstance().getDescriptor(DockerServerEndpoint.class);
+            DockerServerEndpoint.DescriptorImpl descriptor = (DockerServerEndpoint.DescriptorImpl) Jenkins.getInstance().getDescriptorOrDie(DockerServerEndpoint.class);
             return descriptor.doFillCredentialsIdItems(item, uri);
         }

src/main/resources/com/nirima/jenkins/plugins/docker/DockerManagementServer/index.jelly+30 −41 modified

@@ -26,44 +26,38 @@
             <form method="post" action="controlSubmit" name="controlSubmit" id="control">
                 <input type="hidden" id="stopId" name="stopId" value=""/>
 
-            <table width="100%" border="1" cellpadding="2" cellspacing="0"
-                   class="pane bigtable"
-                   style="margin-top: 0">
-                <tr>
-
-                    <td class="pane-header">${%Container Id}</td>
-                    <td class="pane-header">${%Image}</td>
-                    <td class="pane-header">${%Command}</td>
-                    <td class="pane-header">${%Created}</td>
-                    <td class="pane-header">${%Status}</td>
-                    <td class="pane-header">${%Ports}</td>
-                    <td> - </td>
-
-                </tr>
-
-                <j:forEach var="res" items="${it.processes}">
+                <table width="100%" border="1" cellpadding="2" cellspacing="0"
+                       class="pane bigtable"
+                       style="margin-top: 0">
                     <tr>
-                        <td>${res.id}</td>
-                        <td>${res.image}</td>
-                        <td>${res.command}</td>
-                        <td>${it.asTime(res.created)}</td>
-                        <td>${res.status}</td>
-                        <td>
-                            <j:forEach var="port" items="${res.ports}">
-                                <p>${port}</p>
-                                <br/>
-                            </j:forEach>
-                        </td>
-
-                        <td>
-                            <input type="button" value="stop" onclick="stop('${res.id}')"></input>
-                        </td>
-
+                        <td class="pane-header">${%Container Id}</td>
+                        <td class="pane-header">${%Image}</td>
+                        <td class="pane-header">${%Command}</td>
+                        <td class="pane-header">${%Created}</td>
+                        <td class="pane-header">${%Status}</td>
+                        <td class="pane-header">${%Ports}</td>
+                        <td> - </td>
                     </tr>
-                </j:forEach>
-
-
-            </table>
+                    <j:forEach var="res" items="${it.processes}">
+                        <tr>
+                            <td>${res.id}</td>
+                            <td>${res.image}</td>
+                            <td>${res.command}</td>
+                            <td>${it.asTime(res.created)}</td>
+                            <td>${res.status}</td>
+                            <td>
+                                <j:forEach var="port" items="${res.ports}">
+                                    <p>${port}</p>
+                                    <br/>
+                                </j:forEach>
+                            </td>
+                            <td>
+                                <input type="button" value="stop" onclick="stop('${res.id}')"></input>
+                            </td>
+                        </tr>
+                    </j:forEach>
+                </table>
+            </form>
 
             <H2>Images</H2>
 
@@ -77,20 +71,15 @@
                     <td class="pane-header">${%Created}</td>
                     <td class="pane-header">${%Virtual Size}</td>
                 </tr>
-
-
                 <j:forEach var="res" items="${it.images}">
                     <tr>
-
                         <td>${res.tag}</td>
                         <td>${res.id}</td>
                         <td>${it.asTime(res.created)}</td>
                         <td>${res.virtualSize}</td>
                     </tr>
                 </j:forEach>
-
             </table>
-            </form>
 
         </l:main-panel>
     </l:layout>

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

github.com/advisories/GHSA-m6gf-p26p-mx2wghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-10340ghsaADVISORY
www.openwall.com/lists/oss-security/2019/07/11/4ghsamailing-listx_refsource_MLISTWEB
www.securityfocus.com/bid/109156ghsavdb-entryx_refsource_BIDWEB
github.com/jenkinsci/docker-plugin/commit/6ad27199f6fad230be72fd45da78ddac85c075dbghsaWEB
jenkins.io/security/advisory/2019-07-11/ghsax_refsource_CONFIRMWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000