Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:16648
HistoryMay 02, 2019 - 5:21 a.m.

CSRF Protection Bypass

2019-05-0205:21:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

0.002 Low

EPSS

Percentile

54.2%

Jenkins bypasses CSRF Protection. It is possible because it uses a publicly accessible salt to generate CSRF protection tokens, allows an attacker to a brute force the protection mechanism to bypass it. .

References