CVE-2025-67639 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the a…
Low CVSS: 3.5

CVE-2025-67639

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.
Vendor
Jenkins
Product
Jenkins
CWE
CWE-352
Yayın Tarihi
2025-12-10 17:15:56
Güncelleme
2025-12-17 20:23:49
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-

Kategoriler

CWE-352 Jenkins LOW Jenkins 2025

Referanslar

https://www.jenkins.io/security/advisory/2025-12-10/#SECURITY-1166