CVE-2025-31723

The Jenkins Simple Queue Plugin (versions 1.4.6 and earlier) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The root cause is that the plugin does not require POST requests for multiple HTTP endpoints, allowing an attacker to craft requests that mimic legitimate user actions ...