CVE-2019-1003010 | BDVDB-2026-112579 Detail

Description#

A cross-site request forgery vulnerability exists in Jenkins Git Plugin 3.9.1 and earlier in src/main/java/hudson/plugins/git/GitTagAction.java that allows attackers to create a Git tag in a workspace and attach corresponding metadata to a build record.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1095
https://access.redhat.com/errata/RHBA-2019:0326
https://access.redhat.com/errata/RHBA-2019:0327

Exploit#

No public exploit known

History#

Version 12019-02-06Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.