The probability is the direct output of the EPSS model, and conveys an overall sense of the threat of exploitation in the wild. The percentile measures the EPSS probability relative to all known EPSS scores. Note: This data is updated daily, relying on the latest available EPSS model version. Check out the EPSS documentation for more details.
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsLearn about Cross-site Request Forgery (CSRF) vulnerabilities in an interactive lesson.
Start learningUpgrade org.jenkins-ci.plugins:jclouds-jenkins
to version 2.15 or higher.
org.jenkins-ci.plugins:jclouds-jenkins is a plugin that uses JClouds to provide slave launching on most of the currently usable Cloud infrastructures.
Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF). The plugin does not perform permission checks on a method implementing form validation. This form validation method did not require POST requests. This allows users with Overall/Read access
to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
NOTE: This vulnerability has also been identified as: CVE-2019-10369