CVE-2017-2613
jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrat…
Published: 2018-05-15 · CVSS: 5.4 · CVSS 3.0
jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record was only retained until restart in most cases, administrators' web browsers could be manipulated to create a large number of user records (SECURITY-406).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7