Cross-site Request Forgery (CSRF)

2019-09-2100:17:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

50.5%

JSON

jenkins is vulnerable to cross-site request forgery (CSRF). The vulnerability exists as it is possible for CSRF protection tokens for anonymous users to not expire.

CPENameOperatorVersion
jenkinseq2.164.2.1555422716__1.el7
jenkinseq2.107.3.1525883128__1.el7
jenkinseq2.176.3.1568230481__1.el7
jenkinseq2.138.2.1542054911__1.el7
jenkinseq2.164.2.1556031745__1.el7
jenkinseq2.89.2.1516389759__1.el7
jenkinseq2.89.2__1.el7
jenkinseq1.651.2__1.el7
jenkinseq2.89.2.1516390120__1.el7
jenkinseq2.46.3__1.el7

Name	Operator	Version
jenkins	eq	2.164.2.1555422716__1.el7
jenkins	eq	2.107.3.1525883128__1.el7
jenkins	eq	2.176.3.1568230481__1.el7
jenkins	eq	2.138.2.1542054911__1.el7
jenkins	eq	2.164.2.1556031745__1.el7
jenkins	eq	2.89.2.1516389759__1.el7
jenkins	eq	2.89.2__1.el7
jenkins	eq	1.651.2__1.el7
jenkins	eq	2.89.2.1516390120__1.el7
jenkins	eq	2.46.3__1.el7