description: A cross-site request forgery (CSRF) vulnerability in Jenkins Script Security Plugin 1158.v7c1b_73a_69a_08 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-specified webserver.
affected:
{
product: Jenkins Script Security Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 1158.v7c1b_73a_69a_08, status: affected, version: unspecified, versionType: custom
status: unaffected, version: 1.78.1
status: unaffected, version: 1145.1148.vf6d17a_a_a_eef6
}