CVE-2022-20612: Jenkins

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.

Affected products

• Jenkins Jenkins: up to and including 2.319.1; up to and including 2.329
• Oracle Communications Cloud Native Core Automated Test Suite: version 1.9.0 only

Published 2022-01-12. Last modified 2026-06-17.