Security Advisory

CVE-2018-1999039

4.3
MEDIUM

Vulnerability Description

A server-side request forgery vulnerability exists in Jenkins Confluence Publisher Plugin 2.0.1 and earlier in ConfluenceSite.java that allows attackers to have Jenkins submit login requests to an attacker-specified Confluence server URL with attacker specified credentials.
Published Date August 1, 2018
Official Source NIST NVD Advisory