Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary code or (2) initiate deployment of binaries to a Maven repository via unspecified vectors.
References
Link | Resource |
---|---|
http://osvdb.org/92981 | |
http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-05-02.cb | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Feb 2023, 04:42
Type | Values Removed | Values Added |
---|---|---|
Summary | Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary code or (2) initiate deployment of binaries to a Maven repository via unspecified vectors. | |
References |
|
02 Feb 2023, 18:17
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary | CVE-2013-2034 Jenkins: Multiple CSRF in MavenAbstractArtifactRecord.doRedeploy and Jenkins.doEval |
Information
Published : 2014-05-14 19:55
Updated : 2023-12-10 11:31
NVD link : CVE-2013-2034
Mitre link : CVE-2013-2034
CVE.ORG link : CVE-2013-2034
JSON object : View
Products Affected
cloudbees
- jenkins
CWE
CWE-352
Cross-Site Request Forgery (CSRF)