description: A cross-site request forgery (CSRF) vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password.
affected:
{
defaultStatus: unaffected
product: Jenkins Build Failure Analyzer Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 2.4.1, status: affected, version: 0, versionType: maven
}