Jenkins Themis Plugin versions 1.4.1 and earlier contain a cross-site request forgery (CSRF) vulnerability due to a missing permission check on an HTTP endpoint and the lack of requirement for POST requests. This flaw allows attackers with Overall/Read permission to connect to attacker-specified URLs without proper authorization checks. No fix is currently available for this vulnerability.