CVE-2019-10441

CVE-2019-10441 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Jenkins iceScrum Plugin versions 1.1.5 and earlier. This flaw allows an attacker to trick a legitimate user into making an authenticated request, enabling the plugin to connect to an attacker-controlled URL using attacker-specified credentials. With a CVSS score of 4.3 (Medium), the vulnerability has a network attack vector and low attack complexity, requiring user interaction. While it doesn't impact confidentiality or availability, it could lead to unauthorized data modification (I:L). There is no evidence of active exploitation, nor are there known public exploit codes like Metasploit or ExploitDB modules. Community discussion and media coverage for this CVE are minimal, indicating low public awareness and attention.