Description
Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login.
Remediation
References
Related Vulnerabilities
WordPress Plugin Event Management Tickets Booking By Event Monster Cross-Site Scripting (1.0.7)
WordPress Plugin Circles Gallery Cross-Site Scripting (1.0.10)
Oracle JRE CVE-2013-2430 Vulnerability (CVE-2013-2430)
WordPress Plugin Export Users With Meta SQL Injection (0.6.4)
WordPress Plugin Sticky Related Posts Cross-Site Scripting (1.0)