Jenkins Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2019-10353 - Vulnerability Database

Jenkins Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2019-10353

High

Reference: CVE-2019-10353

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-10353

Title: Jenkins Cross-Site Request Forgery (CSRF) Vulnerability

Overview:

CSRF tokens in Jenkins 2.185 and earlier LTS 2.176.1 and earlier did not expire thereby allowing attackers able to obtain them to bypass CSRF protection.