Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins:pollscm

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2017-1000093

    Jenkins Poll SCM Plugin vulnerable to Cross-Site Request Forgery

    Poll SCM Plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Request Forgery attacks. This allowed attackers to initiate polling of projects with a known name. While Jenkins in general does not consider polling …

    org.jenkins-ci.plugins:pollscm Maven