Severity: Critical
CVSS Score: 9.8
Jenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads.