ASA-2019-00095 - Jenkins: Blue Ocean Plugin did not require Cross-Site Request Forgery (CSRF) tokens