Back

HIGH

jenkins: CSRF vulnerability in some administrative actions (SECURITY-225)

Published Feb 3, 2016

Description

Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

References (9)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Feb 3, 2016
Updated Aug 6, 2024
Reserved Sep 29, 2015
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Moderate
Public date Dec 9, 2015
GHSA-3VHR-F5XR-8VPX