Lucene search
+L

10 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2023/09/20 12:00 a.m.•41 views

CSRF vulnerability in build-failure-analyzer allows deleting Failure Causes

build-failure-analyzer 2.4.1 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to delete Failure Causes. build-failure-analyzer 2.4.2 requires POST requests for the affected HTTP...

4.3CVSS4.9AI score0.00388EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder