CVE-2022-20612

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.

References

https://www.oracle.com/security-alerts/cpuapr2022.html

https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2558

http://www.openwall.com/lists/oss-security/2022/01/12/6

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3