GHSA-rqhg-cxfr-8xqw

Jenkins Cross-Site Request Forgery vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2013-0327

Packages

Ecosystem	Package	Affected	Fixed in
Maven	org.jenkins-ci.main:jenkins-core	>= 1.481, < 1.502	1.502
Maven	org.jenkins-ci.main:jenkins-core	< 1.480.3	1.480.3

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2013-0327 advisory
https://access.redhat.com/errata/RHSA-2013:0638 web
https://access.redhat.com/security/cve/CVE-2013-0327 web
https://bugzilla.redhat.com/show_bug.cgi?id=914875 web
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16 web
http://rhn.redhat.com/errata/RHSA-2013-0638.html web
http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb web
http://www.openwall.com/lists/oss-security/2013/02/21/7 web