Description

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.

Remediation

References

CVE-2022-20612

Related Vulnerabilities

WordPress Plugin Responsive Slider-Image Slider-Slideshow for WordPress Multiple Vulnerabilities (2.7.5)

WordPress Plugin Candidate Application Form Arbitrary File Download (1.0)

Liferay Portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-42120)

WordPress Plugin Timber Cross-Site Scripting (1.2.2)

PostgreSQL Buffer Over-read Vulnerability (CVE-2026-18024)

Severity

Medium

Classification

CVE-2022-20612 CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities