VULNERABILITY INTELLIGENCE

CVE-2018-1999026

CVSS score6.5 MEDIUM

EPSS probability0.85%

CISA KEVNot currently listed

Published2018-08-01

Last modified2026-06-17

Description

A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java that allows attackers to have Jenkins send HTTP requests to an attacker-specified host.