GitHub Advisoryadvisory · Maven

GHSA-rqhg-cxfr-8xqw Jenkins Cross-Site Request Forgery vulnerability

MEDIUM Published 2022-05-05 Modified 2023-02-08 Official page ↗
Aliases
CVE-2013-0327
Ecosystem
Maven
Packages
org.jenkins-ci.main:jenkins-core
Severity
Moderate
Weaknesses
CWE-352
Reviewed
2023-02-08

Affected packages

• Maven org.jenkins-ci.main:jenkins-core: >= 1.481, < 1.502 → fixed in 1.502 • Maven org.jenkins-ci.main:jenkins-core: < 1.480.3 → fixed in 1.480.3

Description

Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors.

Related

Alias · CVE (1)

  • CVE-2013-0327 Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to… vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References