Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the controller JVM process. An attacker can execute arbitrary code by tricking a user with the necessary permissions into submitting a malicious request. Remediation Upgrade...

CVE-2026-70432

A cross-site request forgery CSRF vulnerability in Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70431

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70432

A cross-site request forgery CSRF vulnerability in Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70432

A cross-site request forgery (CSRF) vulnerability exists in the Jenkins Multijob Plugin (version 669.v9d96a_d9c71b_0 and earlier). The root cause is that the plugin fails to require POST requests for a specific form validation endpoint. This flaw allows an attacker to execute arbitrary code withi...

CVE-2026-70432

A cross-site request forgery CSRF vulnerability in Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70432

A cross-site request forgery CSRF vulnerability in Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM...

EUVD-2026-53526

A cross-site request forgery CSRF vulnerability in Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70431

The Jenkins Multijob Plugin versions 669.v9d96a_d9c71b_0 and earlier are vulnerable to arbitrary code execution. The root cause is that the plugin provides Groovy scripting features that do not integrate with the Script Security Plugin , failing to enforce necessary sandboxing. An attacker posses...

CVE-2026-70431

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70431

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70431

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2026-70431: Improper Control of Generation of Code

Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

PT-2026-68267

Name of the Vulnerable Software and Affected Versions Jenkins Multijob Plugin versions 669.v9d96a d9c71b 0 and earlier Description A cross-site request forgery CSRF flaw allows attackers to execute arbitrary code within the context of the Jenkins controller JVM. CSRF is a type of attack that tric...

PT-2026-68266

Name of the Vulnerable Software and Affected Versions Jenkins Multijob Plugin versions 669.v9d96a d9c71b 0 and earlier Description The software provides Groovy scripting features that fail to integrate with the Script Security Plugin. This allows users with Item/Create or Item/Configure permissio...

CVE-2026-70432: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Multijob Plugin 669.v9d96ad9c71b0 and earlier allows attackers to execute arbitrary code in the context of the Jenkins controller JVM...

Arbitrary code execution vulnerability in jenkins-multijob-plugin

jenkins-multijob-plugin 669.v9d96ad9c71b0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin. This vulnerability allows attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CSRF vulnerability in jenkins-multijob-plugin allows arbitrary code execution

jenkins-multijob-plugin 669.v9d96ad9c71b0 and earlier does not require POST requests for a form validation endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to execute arbitrary code in the context of the Jenkins controller JVM...

org.jenkins-ci.main:jenkins-test-harness (1.465), org.jenkins-ci.main:jenkins-war (1.465) +5 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.465)

org.jenkins-ci.main:jenkins-core MAVEN version 1.465 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.465 - org.jenkins-ci.main:jenkins-war 1.465 -...

org.jenkins-ci.main:jenkins-test-harness (1.465), org.jenkins-ci.main:jenkins-war (1.465) +5 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.465)

org.jenkins-ci.main:jenkins-core MAVEN version 1.465 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.465 - org.jenkins-ci.main:jenkins-war 1.465 -...