Cross-Site Request Forgery (CSRF)

2019-08-1600:17:48

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

55.9%

JSON

jenkins is vulnerable to cross-site request forgery (CSRF). The CSRF tokens does not expire, allowing an attacker to bypass CSRF protections by upon obtaining the old CSRF tokens.

CPENameOperatorVersion
jenkinseq2.164.2.1555422716__1.el7
jenkinseq2.107.3.1525883128__1.el7
jenkinseq2.138.2.1542054911__1.el7
jenkinseq2.164.2.1556031745__1.el7
jenkinseq2.89.2.1516389759__1.el7
jenkinseq2.89.2__1.el7
jenkinseq1.651.2__1.el7
jenkinseq2.89.2.1516390120__1.el7
jenkinseq2.46.3__1.el7
jenkinseq2.32.2__1.el7

Name	Operator	Version
jenkins	eq	2.164.2.1555422716__1.el7
jenkins	eq	2.107.3.1525883128__1.el7
jenkins	eq	2.138.2.1542054911__1.el7
jenkins	eq	2.164.2.1556031745__1.el7
jenkins	eq	2.89.2.1516389759__1.el7
jenkins	eq	2.89.2__1.el7
jenkins	eq	1.651.2__1.el7
jenkins	eq	2.89.2.1516390120__1.el7
jenkins	eq	2.46.3__1.el7
jenkins	eq	2.32.2__1.el7