GHSA-78cj-2m29-q5r9

Jenkins Cross-Site Request Forgery vulnerability

En bref

Publiée: 2022-05-05 02:48 UTC
Mise à jour: 2024-12-03 06:06 UTC
CVE: CVE-2013-0329

Description

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors.

Paquets affectés

Paquet	Versions
Maven · org.jenkins-ci.main:jenkins-core	introduced 1.481, fixed 1.502
Maven · org.jenkins-ci.main:jenkins-core	introduced 0, fixed 1.480.3

Références

https://nvd.nist.gov/vuln/detail/CVE-2013-0329 ADVISORY
https://access.redhat.com/errata/RHSA-2013:0638 WEB
https://access.redhat.com/security/cve/CVE-2013-0329 WEB
https://bugzilla.redhat.com/show_bug.cgi?id=914877 WEB
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16 WEB
http://rhn.redhat.com/errata/RHSA-2013-0638.html WEB
http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb WEB
http://www.openwall.com/lists/oss-security/2013/02/21/7 WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — GitHub Advisory Database