Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
added 2019/05/31 12:0 a.m.12 views

CSRF vulnerability in warnings-ng

warnings-ng did not require that requests sent to the endpoint used to reset warning counts use POST. This resulted in a cross-site request forgery vulnerability that allows attackers to reset warning counts for future builds. warnings-ng now requires that these requests be sent via POST...

4.3CVSS4.9AI score0.0103EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder