PT-2018-9204
CVE-2018-1000013
·
Published
2018-01-23
·
Updated
2022-05-14
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Jenkins Release Plugin versions 2.9 and earlier
Description:
The issue allows attackers to trigger release builds due to a CSRF vulnerability. This is because form submissions are not required to be submitted via POST.
Recommendations:
For Jenkins Release Plugin versions 2.9 and earlier, consider requiring form submissions to be submitted via POST to mitigate the risk of CSRF attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾