Allele Security Alert
Clickjacking vulnerability in Monitoring Plugin
Jenkins Monitoring Plugin
Monitoring Plugin up to and including 1.74.0
Monitoring Plugin version 1.75.0
Proof of concept
Monitoring Plugin did not set the X-Frame-Options header, allowing its pages to be embedded. This could result in clickjacking attacks.
Daniel Beck (CloudBees, Inc)
Jenkins Security Advisory 2019-01-28
If there is any error in this alert or you wish a comprehensive analysis, let us know.
Last modified: March 6, 2019