PT-2019-5268 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.191 and earlier Jenkins LTS versions 2.176.2 and earlier Description: The issue is related to cross-site request forgery CSRF and allows users to obtain CSRF tokens without an associated web session ID. This results in CSRF...