Description
Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2015-7454 | Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack |
Github GHSA |
GHSA-w7qm-fprw-cqgq | Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack |
References
History
No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T07:51:28.455Z
Reserved: 2015-09-29T00:00:00.000Z
Link: CVE-2015-7538
No data.
Status : Modified
Published: 2016-02-03T18:59:02.977
Modified: 2026-05-06T22:30:45.220
Link: CVE-2015-7538
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Github GHSA