Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2019/01/28 12:00 a.m.•20 views

Monitoring Plugin did not apply CSRF protection even if enabled in Jenkins

Monitoring Plugin provides a standalone JavaMelody servlet with an independent CSRF protection configuration. Even if Jenkins had CSRF protection enabled, Monitoring Plugin may not have it enabled. Monitoring Plugin now checks on startup whether Jenkins has CSRF protection enabled and enables its...

6.5CVSS6.5AI score0.00735EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder