Lucene search
Veracode Vulnerability DatabaseVERACODE:6138HistoryApr 18, 2018 - 6:29 a.m.
Cross-Site Request Forgery(CSRF)
2018-04-1806:29:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
33.0%
favorite plugin is vulnerable to cross-site request forgery (CSRF). The attacks are possible because it does not send the requests via POST to prevent CSRF according to the Jenkins global security configuration, allowing to modify other user’s favorite status.
Related
osv
osv
Jenkins Favorite Plugin vulnerable to Cross-Site Request Forgery
2022-05-14 01:00:42
cvelist
cvelist
CVE-2017-1000244
2017-11-01 13:00:00
cve
cve
CVE-2017-1000244
2017-11-01 13:29:00
prion
prion
Cross site request forgery (csrf)
2017-11-01 13:29:00
redhatcve
redhatcve
CVE-2017-1000244
2018-04-10 14:49:26
github
github
Jenkins Favorite Plugin vulnerable to Cross-Site Request Forgery
2022-05-14 01:00:42
nvd
nvd
CVE-2017-1000244
2017-11-01 13:29:00