Описание
Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors.
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-352
https://bugzilla.redhat.com/show_bug.cgi?id=914875jenkins: cross-site request forgery (CSRF) on Jenkins master
EPSS
Процентиль: 44%
0.00216
Низкий
4.3 Medium
CVSS2
Связанные уязвимости
ubuntu
почти 13 лет назад
Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors.
nvd
почти 13 лет назад
Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors.
debian
почти 13 лет назад
Cross-site request forgery (CSRF) vulnerability in Jenkins master in J ...
EPSS
Процентиль: 44%
0.00216
Низкий
4.3 Medium
CVSS2