Description
jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrators' web browsers could be manipulated to create a large number of user records (SECURITY-406).
Remediation
References
Related Vulnerabilities
WordPress Plugin WooCommerce Help Scout Arbitrary File Upload (2.9)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-0701)
WordPress Plugin WordPress Book List Arbitrary File Upload (5.0.11)
WordPress User-Agent SQL Injection Vulnerability (1.5.2)
Oracle Application Server Other Vulnerability (CVE-2002-0655)