CVE-2019-10353

CSRF tokens in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier did not expire, thereby allowing attackers able to obtain them to bypass CSRF protection

published July 17, 2019

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

CSRF tokens in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier did not expire, thereby allowing attackers able to obtain them to bypass CSRF protection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01502 · 74.1th percentile
Published
2019-07-17T15:45Z
EPSS history
Timeline
  • 17 JUL 15:45Z
    CSRF tokens in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier did not expire, thereby allowing attackers able to obtain them to bypass CSRF protection
    cvelistv5