CVE-2020-2273: CSRF vulnerability in Jenkins ElasTest Plugin

The advisory explicitly states the vulnerability stems from a form validation method that lacks permission checks and doesn't enforce POST requests. In Jenkins plugins, form validation methods like doCheck* in Descriptor classes are common targets for CSRF when missing @RequirePOST. The method name 'doCheckUrl' is inferred from the credential/URL validation context described in the vulnerability. The high confidence comes from the direct match between the described vulnerability mechanics (missing permission check + CSRF via GET) and Jenkins plugin development patterns.