Vulnerability Database

324,311

Total vulnerabilities in the database

CVE-2019-10353

CSRF tokens in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier did not expire, thereby allowing attackers able to obtain them to bypass CSRF protection.

Published: Jul 17, 2019
Updated: Nov 9, 2025
CVE: CVE-2019-10353
GHSA: GHSA-hcxf-rq72-h4rr
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5.1
AV:N/AC:H/Au:N/C:P/I:P/A:P

CWEs:

CWE-352

Affected Software
References

Software	From	Fixed in
jenkins / jenkins	-	2.176.1.x
jenkins / jenkins	-	2.185.x
org.jenkins-ci.main / jenkins-core	-	2.176.2
org.jenkins-ci.main / jenkins-core	2.177	2.186

http://www.openwall.com/lists/oss-security/2019/07/17/2
http://www.securityfocus.com/bid/109373
https://access.redhat.com/errata/RHSA-2019:2503
https://access.redhat.com/errata/RHSA-2019:2548
https://jenkins.io/security/advisory/2019-07-17/#SECURITY-626

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo