GitHub Advisoryadvisory · Maven

GHSA-78cj-2m29-q5r9 Jenkins Cross-Site Request Forgery vulnerability

MEDIUM Published 2022-05-05 Modified 2023-02-08 Official page ↗
Aliases
CVE-2013-0329
Ecosystem
Maven
Packages
org.jenkins-ci.main:jenkins-core
Severity
Moderate
Weaknesses
CWE-352
Reviewed
2023-02-08

Affected packages

• Maven org.jenkins-ci.main:jenkins-core: >= 1.481, < 1.502 → fixed in 1.502 • Maven org.jenkins-ci.main:jenkins-core: < 1.480.3 → fixed in 1.480.3

Description

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors.

Related

Alias · CVE (1)

  • CVE-2013-0329 Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism… vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References