CVE-2013-0329

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors.

Score

CVSS 2.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2013-03-19

Last modified

2024-08-06

Affected products

• Jenkins (Jenkins)

References

• http://rhn.redhat.com/errata/RHSA-2013-0638.html
• http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb
• http://www.openwall.com/lists/oss-security/2013/02/21/7
• https://bugzilla.redhat.com/show_bug.cgi?id=914877
• https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16