VYPR

Confluence Publisher

by Jenkins Project

CVEs (1)

  • CVE-2018-1999039MedAug 1, 2018
    risk 0.28cvss 4.3epss 0.01

    A server-side request forgery vulnerability exists in Jenkins Confluence Publisher Plugin 2.0.1 and earlier in ConfluenceSite.java that allows attackers to have Jenkins submit login requests to an attacker-specified Confluence server URL with attacker specified credentials.