CVE:CVE-2019-1003012
CNNVD:CNNVD-201902-118
Jenkins Blue Ocean Plugins 1.10.1及之前版本中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞执行未授权的操作。（多个文件包括：blueocean-core-js/src/js/bundleStartup.js、 blueocean-core-js/src/js/fetch.ts、 blueocean-core-js/src/js/i18n/i18n.js、 blueocean-core-js/src/js/urlconfig.js、 blueocean-rest/src/main/java/io/jenkins/blueocean/rest/APICrumbExclusion.java、blueocean-web/src/main/java/io/jenkins/blueocean/BlueOceanUI.java和blueocean-web/src/main/resources/io/jenkins/blueocean/BlueOceanUI/index.jelly文件）
solution:Upgrade jenkins blue_ocean to a higher version than 1.10.1,and avoid the version (,1.10.1]; Upgrade redhat openshift_container_platform to a higher version than 3.11,and avoid the version 3.11