Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:16657
HistoryMay 02, 2019 - 5:21 a.m.

Cross-Site Request Forgery (CSRF)

2019-05-0205:21:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

0.002 Low

EPSS

Percentile

55.5%

Jenkins is vulnerable to Cross-site request forgery (CSRF) vulnerability. The attack is possible because the request via the HTTP GET method are not validated, allowing remote attackers to hijack the authentication of administrators for requests.

References