CVE-2025-67639: CSRF
A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67639?
CVE-2025-67639 is classified as a high severity vulnerability due to its potential to allow unauthorized access and account takeover.
How do I fix CVE-2025-67639?
To fix CVE-2025-67639, upgrade your Jenkins installation to version 2.541 or later, or LTS version 2.529 or later.
Who is affected by CVE-2025-67639?
CVE-2025-67639 affects Jenkins versions 2.540 and earlier, as well as LTS versions 2.528.2 and earlier.
What type of vulnerability is CVE-2025-67639?
CVE-2025-67639 is a cross-site request forgery (CSRF) vulnerability that allows attackers to trick users into logging in to an attacker's account.
Can CVE-2025-67639 be exploited remotely?
Yes, CVE-2025-67639 can be exploited remotely if a user is tricked into following a malicious link while logged into Jenkins.