CVE-2019-1003076: CSRF
Published Apr 4, 2019
·Updated
A cross-site request forgery vulnerability in Jenkins Audit to Database Plugin in the DbAuditPublisherDescriptorImpl#doTestJdbcConnection form validation method allows attackers to initiate a connection to an attacker-specified server.
Affected Software
2 affected components
Jenkins Audit To Database Jenkins
maven/org.jenkins-ci.plugins:audit2db<=0.5
Event History
Apr 4, 2019
CVE Published
via MITRE·03:38 PM
Data Sourced
via MITRE·03:38 PM
Description
May 13, 2022
Advisory Published
via GitHub·01:25 AM
Frequently Asked Questions
1
What is the severity of CVE-2019-1003076?
The severity of CVE-2019-1003076 is classified as medium due to its potential to allow attackers to initiate unauthorized connections.
2
How do I fix CVE-2019-1003076?
To fix CVE-2019-1003076, upgrade the Jenkins Audit to Database Plugin to version 0.6 or later.
3
What systems are affected by CVE-2019-1003076?
CVE-2019-1003076 affects Jenkins Audit to Database Plugin versions up to and including 0.5.
4
What type of vulnerability is CVE-2019-1003076?
CVE-2019-1003076 is a cross-site request forgery (CSRF) vulnerability.
5
What can an attacker do with CVE-2019-1003076?
An attacker can exploit CVE-2019-1003076 to initiate a JDBC connection to a malicious server.