Cross-Site Request Forgery in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin

CVE-2019-10456

What is CVE-2019-10456?

The Jenkins Oracle Cloud Infrastructure Compute Classic Plugin is susceptible to a cross-site request forgery (CSRF) vulnerability. This security flaw allows attackers to perform actions on behalf of authenticated users by sending malicious requests to the Jenkins server. As a result, the attacker can connect to a specially crafted URL using credentials that the victim is expected to utilize, potentially leading to unauthorized access or exploitation of sensitive data.

References