Description
REST API endpoints in Jenkins 2.218 and earlier, LTS 2.204.1 and earlier were vulnerable to clickjacking attacks.
Remediation
References
Related Vulnerabilities
XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-37277)
WordPress Plugin Contact Form 7-Clockwork SMS Cross-Site Scripting (2.3.0)
Oracle Database Server CVE-2014-2406 Vulnerability (CVE-2014-2406)
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-3056)
Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2022-29224)