CVE-2025-64138

Publication date

2025-10-29 13:29:44

Family

jenkins

State

PUBLISHED

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL.