4 matches found
GHSA-3VHR-F5XR-8VPX Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack
Cross-site request forgery CSRF vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method...
jenkins: CSRF protection ineffective (SECURITY-233)
Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors...
jenkins: CSRF vulnerability in some administrative actions (SECURITY-225)
Cross-site request forgery CSRF vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method...
jenkins: CSRF vulnerability in some administrative actions (SECURITY-225)
Cross-site request forgery CSRF vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method...