description: A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to send an HTTP request to an attacker-specified URL and parse the response as XML.
affected:
{
vendor: Jenkins Project
product: Jenkins Nexus Platform Plugin
versions:
version: 0, versionType: maven, lessThanOrEqual: 3.18.0-03, status: affected
defaultStatus: unaffected
}