Description

Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method.

Remediation

References

CVE-2015-7537

Related Vulnerabilities

PostgreSQL Insufficient Verification of Data Authenticity Vulnerability (CVE-2024-10977)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (3.5.8.1)

WordPress Plugin YITH Color and Label Variations for WooCommerce Security Bypass (1.8.11)

WebLogic CVE-2021-2214 Vulnerability (CVE-2021-2214)

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-3227)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2015-7537