PT-2018-9204
CVE-2018-1000013
·
تاريخ النشر
2018-01-23
·
تاريخ التحديث
2022-05-14
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Jenkins Release Plugin versions 2.9 and earlier
Description:
The issue allows attackers to trigger release builds due to a CSRF vulnerability. This is because form submissions are not required to be submitted via POST.
Recommendations:
For Jenkins Release Plugin versions 2.9 and earlier, consider requiring form submissions to be submitted via POST to mitigate the risk of CSRF attacks.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾