Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/09/21 12:00 a.m.•12 views

CSRF vulnerability in security-inspector

security-inspector 117.v6eecc36919c2 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to replace the generated report stored in a per-session cache and displayed to authorized users a...

8.8CVSS7.8AI score0.00437EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder