Intrusion PreventionJenkins.GitHub.Plugin.CSRF
Description
This indicates an attack attempt against a Cross-Site Request-Forgery vulnerability in Jenkins Github Plugin.
The vulnerability is due to insufficient sanitization of user supplied inputs in the application. An attacker may exploit this to cause the server to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application.
Affected Products
Jenkins GitHub Plugin 1.29.1 and earlier
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://jenkins.io/security/advisory/2018-06-25/#SECURITY-915
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 47701 |
| Created | May 16, 2019 |
| Updated | Jun 04, 2019 |
| Risk |
|
| CVE ID | CVE-2018-1000600 |
| Exploit Prediction Score | 94.1% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |