CVE-2013-0329: Jenkins Cross-Site Request Forgery vulnerability in org.jenkins-ci.main:jenkins-core
Summary
CVE-2013-0329: Jenkins Cross-Site Request Forgery vulnerability. Affects org.jenkins-ci.main:jenkins-core across 2 version ranges.
< 1.480.3
>= 1.481, < 1.502
Fixed in 1.480.3 or 1.502, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Jenkins is an open-source automation server that enables developers to build, test, and deploy their software projects. It provides a wide range of features and plugins to support continuous integration and delivery processes. The vulnerable package, org.jenkins-ci.main:jenkins-core, is a core component of Jenkins responsible for its fundamental functionality.
Vulnerability Detail
The Jenkins Cross-Site Request Forgery (CSRF) vulnerability, identified as CVE-2013-0329, allows remote attackers to bypass the CSRF protection mechanism. The specific attack vectors are unknown. This vulnerability affects Jenkins versions before 1.502 and LTS before 1.480.3. The impact of this vulnerability can vary depending on the attacker's intentions, but it could potentially lead to unauthorized actions being performed on behalf of authenticated users or the exposure of sensitive information.
How To Fix
Latest published version: 2.587 as of 22 Oct 2026
Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
< 1.480.31.480.3 -
>= 1.481, < 1.5021.502
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The Jenkins Cross-Site Request Forgery (CSRF) vulnerability in org.jenkins-ci.main:jenkins-core can be mitigated by updating the package to a fixed version. It is crucial to promptly apply the recommended fix to ensure the security and integrity of Jenkins installations. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.jenkins-ci.main:jenkins-core →
FAQ
Jenkins is an open-source automation server used for continuous integration and delivery processes. It helps developers build, test, and deploy their software projects efficiently.
org.jenkins-ci.main:jenkins-core is a core component of Jenkins that provides essential functionality for the automation server.
A Cross-Site Request Forgery (CSRF) vulnerability allows an attacker to trick authenticated users into performing unintended actions on a web application.
The specific attack vectors for the Jenkins CSRF vulnerability are unknown. However, it allows remote attackers to bypass the CSRF protection mechanism.
The Jenkins CSRF vulnerability could lead to unauthorized actions being performed on behalf of authenticated users or the exposure of sensitive information.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.main:jenkins-core.
