CVE-2022-20612

CVE-2022-20612

EPSS 1.8%

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.

Affected products

Jenkins project · Jenkins

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2558 https://www.oracle.com/security-alerts/cpuapr2022.html http://www.openwall.com/lists/oss-security/2022/01/12/6