CVE-2018-1000414

Description

A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java, FolderConfigFileAction.java that allows creating and editing configuration file definitions.

CVSS Version 3.0

nvd

CVE ID: CVE-2018-1000414
Base Score: 8.1
Base Severity: HIGH
Vector String:CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CVSS Version 2.0

nvd

CVE ID: CVE-2018-1000414
Base Score: 5.8
Base Severity: MEDIUM
Vector String:AV:N/AC:M/Au:N/C:N/I:P/A:P

Refrence: NVD