BDU%3A2023-07532 — Vulnetix

BDU%3A2023-07532 PUBLISHED CVSS 10 CRITICAL

Уязвимость плагина управления учетными данными Jenkins Azure Credentials, связанная с подделкой межсайтовых запросов, позволяющая нарушителю осуществить CSRF-атаку

Risk Scores

CVSS 2.0

Affected Products

Vendor	Product	Versions
Jenkins	Azure Credentials
Jenkins Project	Jenkins Azure Credentials Plugin	unspecified

Timeline

Feb 15, 2023 PoC Published
Nov 9, 2023 CVE Published

References

https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-1756 url
https://www.openwall.com/lists/oss-security/2023/02/15/4 url
[oss-security] 20230215 Multiple vulnerabilities in Jenkins plugins mailing-list

Open in Interactive Console →