Description
A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.
Remediation
References
http://www.openwall.com/lists/oss-security/2022/01/12/6
https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2558
https://www.oracle.com/security-alerts/cpuapr2022.html
Related Vulnerabilities
CVE-2023-45133 Vulnerability in npm package babel-traverse
CVE-2017-7957 Vulnerability in maven package xstream:xstream
CVE-2021-23663 Vulnerability in npm package sey
CVE-2021-3777 Vulnerability in npm package tmpl
CVE-2021-42357 Vulnerability in maven package org.apache.knox:gateway-service-knoxsso