CVE-2025-64141

Publication date

2025-10-29 13:29:46

Family

jenkins

State

PUBLISHED

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.