Lucene search
GoogleOSV:CVE-2019-10384HistoryAug 28, 2019 - 4:15 p.m.
CVE-2019-10384
2019-08-2816:15:10
Google
osv.dev
3
Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user.
Related
osv
osv
Cross-Site Request Forgery in Jenkins
2022-05-24 16:55:01
nvd
nvd
CVE-2019-10384
2019-08-28 16:15:10
prion
prion
Cross site request forgery (csrf)
2019-08-28 16:15:00
github
github
Cross-Site Request Forgery in Jenkins
2022-05-24 16:55:01
redhatcve
redhatcve
CVE-2019-10384
2019-08-30 05:28:32
veracode
veracode
Cross-site Request Forgery (CSRF)
2019-09-21 00:17:23
cvelist
cvelist
CVE-2019-10384
2019-08-28 15:30:17
cve
cve
CVE-2019-10384
2019-08-28 16:15:10
openvas
openvas
Jenkins < 2.192 and < 2.176.3 LTS Multiple Vulnerabilities - Windows
2019-08-30 00:00:00
Jenkins < 2.192 and < 2.176.3 LTS Multiple Vulnerabilities - Linux
2019-08-30 00:00:00
redhat
redhat
nessus
nessus
RHEL 7 : OpenShift Container Platform 3.11 jenkins (RHSA-2019:3144)
2019-10-18 00:00:00
Jenkins < 2.176.3 LTS / 2.192 Multiple Vulnerabilities
2019-10-10 00:00:00
freebsd
freebsd
jenkins -- multiple vulnerabilities
2019-08-28 00:00:00
archlinux
archlinux
[ASA-201908-22] jenkins: multiple issues
2019-08-30 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00