Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2020/09/23 12:00 a.m.•22 views

CSRF vulnerability in warnings allows remote code execution

warnings 5.0.1 and earlier does not require POST requests for a form validation method intended for testing custom warnings parsers, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to execute arbitrary code. warnings 5.0.2 requires POST requests f...

8.8CVSS8.2AI score0.01082EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder