Description
A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.
Remediation
References
Related Vulnerabilities
WordPress Plugin Contact Form 7 Datepicker Cross-Site Scripting (2.6.0)
WordPress Plugin Pricing Table by Supsystic Cross-Site Request Forgery (1.8.0)
OpenSSL Key Management Errors Vulnerability (CVE-2016-7056)
GlassFish CVE-2016-3608 Vulnerability (CVE-2016-3608)
WordPress Plugin WooCommerce Cross-Site Request Forgery (2.2.2)