description: A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.
affected:
{
product: Jenkins
vendor: Jenkins project
versions:
lessThanOrEqual: 2.329, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: LTS 2.319.1, status: affected, version: unspecified, versionType: custom
}