CVE-2019-10331

CVE-2019-10331 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Jenkins ElectricFlow Plugin versions 1.1.5 and earlier. This flaw allows an attacker to trick a legitimate user into making a request that causes the plugin to connect to an attacker-controlled URL using attacker-specified credentials. Rated as Medium severity (CVSS 4.3), it requires user interaction and could lead to unauthorized data modification or limited information disclosure, though it does not impact confidentiality or availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.