LOW 3.5 Maven
Jenkins has a CSRF vulnerability on the login form
GHSA-6837-qgrc-x5p6 · BIT-jenkins-2025-67639 · CVE-2025-67639
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.
Ready to move
Start Securing
Free, no credit card | First findings in minutes