description: A cross-site request forgery (CSRF) vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules.
affected:
{
defaultStatus: unknown
product: Jenkins Ivy Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 2.5, status: affected, version: 0, versionType: maven
}