description: A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to perform releases with attacker-specified options.
affected:
{
product: Jenkins Maven Release Plugin
vendor: Jenkins project
versions:
status: affected, version: 0.14.0 and earlier
}