CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-1003086

A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers to initiate a connection to an attacker-specified server.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 37.4%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.3

References

Products affected by CVE-2019-1003086

Jenkins » Chef Sinatra » Version: N/A

cpe:2.3:a:jenkins:chef_sinatra:-
Jenkins » Chef Sinatra » Version: 1.10

cpe:2.3:a:jenkins:chef_sinatra:1.10
Jenkins » Chef Sinatra » Version: 1.11

cpe:2.3:a:jenkins:chef_sinatra:1.11
Jenkins » Chef Sinatra » Version: 1.12

cpe:2.3:a:jenkins:chef_sinatra:1.12
Jenkins » Chef Sinatra » Version: 1.13

cpe:2.3:a:jenkins:chef_sinatra:1.13
Jenkins » Chef Sinatra » Version: 1.14

cpe:2.3:a:jenkins:chef_sinatra:1.14
Jenkins » Chef Sinatra » Version: 1.15

cpe:2.3:a:jenkins:chef_sinatra:1.15
Jenkins » Chef Sinatra » Version: 1.17

cpe:2.3:a:jenkins:chef_sinatra:1.17
Jenkins » Chef Sinatra » Version: 1.18

cpe:2.3:a:jenkins:chef_sinatra:1.18
Jenkins » Chef Sinatra » Version: 1.2

cpe:2.3:a:jenkins:chef_sinatra:1.2
Jenkins » Chef Sinatra » Version: 1.20

cpe:2.3:a:jenkins:chef_sinatra:1.20
Jenkins » Chef Sinatra » Version: 1.3

cpe:2.3:a:jenkins:chef_sinatra:1.3
Jenkins » Chef Sinatra » Version: 1.4

cpe:2.3:a:jenkins:chef_sinatra:1.4
Jenkins » Chef Sinatra » Version: 1.5

cpe:2.3:a:jenkins:chef_sinatra:1.5
Jenkins » Chef Sinatra » Version: 1.6

cpe:2.3:a:jenkins:chef_sinatra:1.6
Jenkins » Chef Sinatra » Version: 1.7

cpe:2.3:a:jenkins:chef_sinatra:1.7
Jenkins » Chef Sinatra » Version: 1.8

cpe:2.3:a:jenkins:chef_sinatra:1.8
Jenkins » Chef Sinatra » Version: 1.9

cpe:2.3:a:jenkins:chef_sinatra:1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-1003086

Products

Pricing

Contact Us