Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-9wdu-x7wy-tkf4
Vulnerability ID VCID-9wdu-x7wy-tkf4
Aliases CVE-2013-0328
GHSA-q5f8-fxrx-pw6f
Summary Cross-Site Request Forgery (CSRF) CVE-2013-0328 jenkins: XSS
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-352 Cross-Site Request Forgery (CSRF)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual MODERATE http://rhn.redhat.com/errata/RHSA-2013-0638.html
generic_textual MODERATE https://access.redhat.com/security/cve/CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
epss 0.00118 https://api.first.org/data/v1/epss?cve=CVE-2013-0328
generic_textual MODERATE https://bugzilla.redhat.com/show_bug.cgi?id=914876
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-q5f8-fxrx-pw6f
cvssv2 4.3 https://nvd.nist.gov/vuln/detail/CVE-2013-0328
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2013-0328
generic_textual MODERATE https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
generic_textual MODERATE http://www.openwall.com/lists/oss-security/2013/02/21/7
Reference id Reference type URL
http://rhn.redhat.com/errata/RHSA-2013-0638.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0328.json
https://api.first.org/data/v1/epss?cve=CVE-2013-0328
https://bugzilla.redhat.com/show_bug.cgi?id=914876
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb
http://www.openwall.com/lists/oss-security/2013/02/21/7
http://www.securityfocus.com/bid/57994
cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*
cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*
CVE-2013-0328 https://access.redhat.com/security/cve/CVE-2013-0328
CVE-2013-0328 https://nvd.nist.gov/vuln/detail/CVE-2013-0328
GHSA-q5f8-fxrx-pw6f https://github.com/advisories/GHSA-q5f8-fxrx-pw6f
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2013-0328
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.30742
EPSS Score 0.00118
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T12:50:03.222758+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jenkins-ci.main/jenkins-core/CVE-2013-0328.yml 38.0.0