CVE-2013-0327: CSRF
Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors.
Other sources
Jenkins Security Advisory 2013-02-16
One of the vulnerabilities allows cross-site request forgery (CSRF) attacks on Jenkins master, which causes an user to make unwanted actions on Jenkins.
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0327?
CVE-2013-0327 is classified as a medium severity vulnerability due to its potential for cross-site request forgery attacks.
How do I fix CVE-2013-0327?
To fix CVE-2013-0327, it is recommended to upgrade Jenkins to version 1.502 or later, or LTS version 1.480.3 or later.
What types of attacks can exploit CVE-2013-0327?
CVE-2013-0327 can be exploited by remote attackers to perform cross-site request forgery attacks, potentially hijacking user authentication.
Which versions of Jenkins are affected by CVE-2013-0327?
CVE-2013-0327 affects Jenkins versions before 1.502 and LTS versions before 1.480.3.
Is user intervention required to exploit CVE-2013-0327?
Yes, user intervention is required as the vulnerability relies on users being tricked into visiting a malicious site that triggers the CSRF.