Security Advisory

CVE-2025-27624

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-03-05 22:33:36

Last updated 2025-03-06 16:15:59

Assigner jenkins

CVSS score not scored

State PUBLISHED

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.499 and earlier, LTS 2.492.1 and earlier allows attackers to have users toggle their collapsed/expanded status of sidepanel widgets (e.g., Build Queue and Build Executor Status widgets).

← Browse all CVEs View on cve.org ↗