{"id":"CVE-2013-0327","published":"2013-03-19T14:00:00Z","modified":"2024-08-06T14:25:09Z","title":"Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3…","vendor":null,"product":null,"tier":"tail","description":{"text":"Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.03147,"percentile":0.87839,"provenance":"source"},"cwes":[],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-0638.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.openwall.com/lists/oss-security/2013/02/21/7","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=914875","tags":["x_refsource_MISC"]},{"url":"http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb","tags":["x_refsource_CONFIRM"]},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16","tags":["x_refsource_CONFIRM"]}],"priority":{"score":17.6,"factors":[{"name":"EPSS percentile","points":17.57}]},"affected":[{"ecosystem":"Maven","package":"org.jenkins-ci.main:jenkins-core","vulnerableRanges":[">=1.481, <1.502","<1.480.3"],"patched":["1.502","1.480.3"],"from":["GHSA-rqhg-cxfr-8xqw"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-5218","exploited":false,"provenance":"source"}}