CVE-2022-20612

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without…

published January 12, 2022

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01813 · 78.5th percentile
Published
2022-01-12T19:05Z
EPSS history
Timeline
  • 12 JAN 19:05Z
    A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without…
    cvelistv5