description: A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline restFul API Plugin 0.11 and earlier allows attackers to connect to an attacker-specified URL, capturing a newly generated JCLI token.
affected:
{
defaultStatus: unknown
product: Jenkins Pipeline restFul API Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 0.11, status: affected, version: 0, versionType: maven
}