Description (CNA)
A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Jenkins project / Jenkins | affected unspecified through 2.329; affected unspecified through LTS 2.319.1 |
CWE
No CWE identifiers supplied.
References
- https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2558
- http://www.openwall.com/lists/oss-security/2022/01/12/6
- https://www.oracle.com/security-alerts/cpuapr2022.html
ADP enrichment
No English description supplied.