VULNERABILITY INTELLIGENCE
CVE-2015-7537
CVSS score8.8 HIGH
EPSS probability2.40%
CISA KEVNot currently listed
Published2016-02-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)