https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T13:56:28.949722+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-10384 CVE-2019-10384 2026-10-17T13:56:28.951993+00:00

Affected: Jenkins project Jenkins

Jenkins 2.191 and earlier, LTS 2.176.2 and earlier allowed users to obtain CSRF tokens without an associated web session ID, resulting in CSRF tokens that did not expire and could be used to bypass CSRF protection for the anonymous user.