Количество 5
Количество 5
CVE-2015-5318
Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack.
CVE-2015-5318
Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack.
CVE-2015-5318
Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack.
CVE-2015-5318
Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible ...
GHSA-3wmv-7php-rhg5
Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2015-5318 Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack. | CVSS2: 6.8 | 0% Низкий | около 10 лет назад | |
CVE-2015-5318 Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack. | CVSS2: 4.3 | 0% Низкий | около 10 лет назад | |
CVE-2015-5318 Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which makes it easier for remote attackers to bypass the CSRF protection mechanism via a brute force attack. | CVSS2: 6.8 | 0% Низкий | около 10 лет назад | |
CVE-2015-5318 Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible ... | CVSS2: 6.8 | 0% Низкий | около 10 лет назад | |
GHSA-3wmv-7php-rhg5 Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу