Description

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.

Remediation

References

CVE-2022-20612

Related Vulnerabilities

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner SQL Injection (4.2.161)

WordPress Plugin Webapp builder (Free mobile apps native iPhone iOS & Android Winphone mobile apps) Arbitrary File Upload (2.0)

WordPress Plugin Gmedia Photo Gallery Cross-Site Scripting (0.9.3)

Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2025-30752)

WordPress Plugin Header Footer Code Manager Cross-Site Scripting (1.1.16)

Severity

Medium

Classification

CVE-2022-20612 CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities