CVE-2019-16551: CSRF
Published Dec 17, 2019
·Updated
A cross-site request forgery vulnerability in Jenkins Gerrit Trigger Plugin 2.30.1 and earlier allows attackers to connect to an attacker-specified HTTP URL or SSH server using attacker-specified credentials.
Affected Software
2 affected componentsFixes available
maven/com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger<2.30.2
2.30.2
Jenkins Gerrit Trigger Jenkins<=2.30.1
Event History
Dec 17, 2019
CVE Published
via MITRE·02:40 PM
Data Sourced
via MITRE·02:40 PM
Description
May 24, 2022
Advisory Published
05:03 PM
Frequently Asked Questions
1
What is the severity of CVE-2019-16551?
CVE-2019-16551 is rated as a medium severity vulnerability.
2
How do I fix CVE-2019-16551?
To remediate CVE-2019-16551, upgrade the Jenkins Gerrit Trigger Plugin to version 2.30.2 or later.
3
What software is affected by CVE-2019-16551?
CVE-2019-16551 affects Jenkins Gerrit Trigger Plugin versions 2.30.1 and earlier.
4
What type of vulnerability is CVE-2019-16551?
CVE-2019-16551 is a cross-site request forgery vulnerability.
5
What are the implications of CVE-2019-16551?
CVE-2019-16551 allows attackers to connect to specified HTTP URLs or SSH servers using attacker-controlled credentials.