vulnerability
Red Hat OpenShift: CVE-2022-20612: jenkins: no POST request is required for the endpoint handling manual build requests which could result in CSRF
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:N/AC:H/Au:N/C:N/I:P/A:N) | Jan 12, 2022 | Feb 11, 2022 | Apr 11, 2025 |
Severity
3
CVSS
(AV:N/AC:H/Au:N/C:N/I:P/A:N)
Published
Jan 12, 2022
Added
Feb 11, 2022
Modified
Apr 11, 2025
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.
Solution
linuxrpm-upgrade-jenkins
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.