CSRF Vulnerability in Jenkins Allows Unauthorized User Creation
CVE-2017-2613 · MEDIUM Severity
AV:N/AC:M/AU:N/C:N/I:P/A:P
jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrators' web browsers could be manipulated to create a large number of user records (SECURITY-406).
Learn more about our Web App Pen Testing.