| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.main:jenkins-core | ≥ 2.34, < 2.44< 2.32.2 | 2.442.32.2 |
| jenkins | < 2.32.2< 2.44 | 2.32.22.44 |
jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrators' web browsers could be manipulated to create a large number of user records (SECURITY-406).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free