Non évaluée
CSRF tokens in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier did not expire, thereby allowing attackers able to obtain them to bypass CSRF protec...
CVE-2019-10353
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
CSRF tokens in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier did not expire, thereby allowing attackers able to obtain them to bypass CSRF protection.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory openwall.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory jenkins.io
- web securityfocus.com