What is GHSA-w7qm-fprw-cqgq?

GHSA-w7qm-fprw-cqgq is a security advisory published by GitHub Security Advisories with High severity. Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack

Which CVE IDs does GHSA-w7qm-fprw-cqgq cover?

GHSA-w7qm-fprw-cqgq covers the following CVE IDs: CVE-2015-7538. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w7qm-fprw-cqgq?

GHSA-w7qm-fprw-cqgq has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-w7qm-fprw-cqgq?

GHSA-w7qm-fprw-cqgq affects 2 products, including: maven/org.jenkins-ci.main:jenkins-core:\u003e= 1.626, \u003c 1.640; maven/org.jenkins-ci.main:jenkins-core:\u003c 1.625.2.

GHSA-w7qm-fprw-cqgqHighCVSS 8.8

Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

March 13, 2025

🔗 CVE IDs covered (1)

CVE-2015-7538 →

📋 Description

Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.

🎯 Affected products2

maven/org.jenkins-ci.main:jenkins-core:>= 1.626, < 1.640
maven/org.jenkins-ci.main:jenkins-core:< 1.625.2

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2015-7538
https://access.redhat.com/errata/RHSA-2016:0070
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-12-09
http://rhn.redhat.com/errata/RHSA-2016-0489.html
https://github.com/jenkinsci/jenkins/commit/ba747888108d0db90d469c6d210b1df465d8fac1
https://github.com/jenkinsci/jenkins/commit/ef2c0dc163695af3a57ad7a45571293377ff679b
https://github.com/advisories/GHSA-w7qm-fprw-cqgq