BIT-JENKINS-2025-27624

A cross-site request forgery CSRF vulnerability in Jenkins 2.499 and earlier, LTS 2.492.1 and earlier allows attackers to have users toggle their collapsed/expanded status of sidepanel widgets e.g., Build Queue and Build Executor Status widgets...

CVE-2025-27624

A cross-site request forgery (CSRF) vulnerability exists in Jenkins versions 2.499 and earlier , as well as LTS 2.492.1 and earlier . The flaw is caused by improper request validation , which allows a remote attacker to perform a CSRF attack. Specifically, an attacker can force users to toggle th...