Jenkins Translation Assistance Plugin 1.15 and earlier did not require form submissions to be submitted via POST, resulting in a CSRF vulnerability allowing attackers to override localized strings displayed to all users on the current Jenkins instance if the victim is a Jenkins administrator.


원문출처 : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-1000014