Description

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.

Remediation

References

CVE-2022-20612

Related Vulnerabilities

WordPress Plugin BuddyBoss Media Cross-Site Scripting (3.2.3)

Liferay DXP Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2024-25607)

WordPress Plugin Image Slider Arbitrary File Deletion (1.1.89)

Beego Framework Improper Certificate Validation Vulnerability (CVE-2024-40464)

WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.12)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2022-20612