CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. It affects Jenkins, Java.
CVE
CVE-2018-1000414
Severity
HIGH
CVSS
8.1
EPSS
0.83%
Jenkins Java
Original NVD Description
A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java, FolderConfigFileAction.java that allows creating and editing configuration file definitions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)