CVE-2019-10408

4.3 mediumEPSS 0.6%

Medium (4.3) in jenkins project inheritance. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in hudson.plugins:project-inheritance 19.08.2.

A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers to trigger project generation from templates.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2019-09-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jenkins:project_inheritance

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-xc7q-p3f4-q389	Maven	hudson.plugins:project-inheritance	<19.08.2	19.08.2

References

http://www.openwall.com/lists/oss-security/2019/09/25/3
https://jenkins.io/security/advisory/2019-09-25/#SECURITY-401
http://www.openwall.com/lists/oss-security/2019/09/25/3
https://jenkins.io/security/advisory/2019-09-25/#SECURITY-401

Check your stack JSON