description: A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to trick users into logging in to the attacker's account.
affected:
{
defaultStatus: unknown
product: Jenkins Assembla Auth Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 1.14, status: affected, version: 0, versionType: maven
}