description: A missing permission check in Jenkins Fortify on Demand Uploader Plugin 3.0.10 and earlier allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server.
affected:
{
product: Jenkins Fortify on Demand Uploader Plugin
vendor: Jenkins project
versions:
status: affected, version: 3.0.10 and earlier
}