Required CVE Record Information
Description
Jenkins Lucene-Search Plugin 387.v938a_ecb_f7fe9 and earlier does not require POST requests for an HTTP endpoint, allowing attackers to reindex the database.
References 2 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- jenkins.io: Jenkins Security Advisory 2023-04-12 vendor-advisoryx_transferred
- http://www.openwall.com/lists/oss-security/2023/04/13/3 x_transferred