CVE-2018-1000414: CSRF
A cross-site request forgery vulnerability exists in Jenkins Config File Provider Plugin 3.1 and earlier in ConfigFilesManagement.java, FolderConfigFileAction.java that allows creating and editing configuration file definitions.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1000414?
CVE-2018-1000414 is a cross-site request forgery vulnerability in Jenkins Config File Provider Plugin 3.1 and earlier.
How severe is CVE-2018-1000414?
CVE-2018-1000414 has a severity rating of 8.1 (high).
What software is affected by CVE-2018-1000414?
Jenkins Config File Provider Plugin versions up to and including 3.1 are affected by CVE-2018-1000414.
How can I fix CVE-2018-1000414?
To fix CVE-2018-1000414, update Jenkins Config File Provider Plugin to a version later than 3.1.
Where can I find more information about CVE-2018-1000414?
More information about CVE-2018-1000414 can be found at the following references: [1] http://www.securityfocus.com/bid/106532 [2] https://jenkins.io/security/advisory/2018-09-25/#SECURITY-938