Description
jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrators' web browsers could be manipulated to create a large number of user records (SECURITY-406).
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-2001-0151)
WordPress Plugin CSS Plus Multiple Unspecified Vulnerabilities (1.3.1)
WebLogic CVE-2021-2214 Vulnerability (CVE-2021-2214)
Lighttpd Resource Management Errors Vulnerability (CVE-2008-4298)
WordPress Plugin WooCommerce PDF Vouchers-Ultimate Gift Cards Security Bypass (4.9.3)