Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
added 2020/08/12 12:00 a.m.20 views

CSRF vulnerability in flaky-test-handler

flaky-test-handler 1.0.4 and earlier does not require POST requests for the "Deflake this build" feature, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to rebuild a project at a previous git revision where the tests were failing. As of publicati...

4.3CVSS4.9AI score0.00679EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder