{"id":"CVE-2013-0329","published":"2013-03-19T14:00:00Z","modified":"2024-08-06T14:25:09Z","title":"Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF…","vendor":null,"product":null,"tier":"tail","description":{"text":"Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.02309,"percentile":0.83251,"provenance":"source"},"cwes":[],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=914877","tags":["x_refsource_MISC"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0638.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.openwall.com/lists/oss-security/2013/02/21/7","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb","tags":["x_refsource_CONFIRM"]},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16","tags":["x_refsource_CONFIRM"]}],"priority":{"score":16.7,"factors":[{"name":"EPSS percentile","points":16.65}]},"affected":[{"ecosystem":"Maven","package":"org.jenkins-ci.main:jenkins-core","vulnerableRanges":[">=1.481, <1.502","<1.480.3"],"patched":["1.502","1.480.3"],"from":["GHSA-78cj-2m29-q5r9"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2951","exploited":false,"provenance":"source"}}