Jenkins Cross-Site Request Forgery vulnerability

高危 7.5CVE-2013-0329 · GHSA-78cj-2m29-q5r9 · Published 19/03/2013 · updated 16/06/2026

要点

CVE-2013-0329 是影响 org.jenkins-ci.main:jenkins-core, jenkins (jenkins) 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：2.3%，高于 83.4% 的漏洞。
修复：升级到 1.502, 1.480.3 或更高版本。

Package	Affected versions	Patched versions
org.jenkins-ci.main:jenkins-core Maven	`≥ 1.481, < 1.502< 1.480.3`	`1.5021.480.3`
jenkins jenkins	`≤ 1.480.2≤ 1.501`	No fix yet

Description

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors.

NVD description

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors.

References

nvd.nist.gov/vuln/detail/CVE-2013-0329 · ADVISORY
access.redhat.com/errata/RHSA-2013:0638 · WEB
access.redhat.com/security/cve/CVE-2013-0329 · WEB
bugzilla.redhat.com/show_bug.cgi · WEB
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16 · WEB
rhn.redhat.com/errata/RHSA-2013-0638.html · WEB
cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb · WEB
openwall.com/lists/oss-security/2013/02/21/7 · WEB

org.jenkins-ci.main:jenkins-core 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jenkins-ci.main:jenkins-core

Maven

≥ 1.481, < 1.502< 1.480.3

1.5021.480.3

jenkins

≤ 1.480.2≤ 1.501

No fix yet

Description

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors.

NVD description

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors.

org.jenkins-ci.main:jenkins-core 的其他漏洞

查看全部 →