VDB
CISA-2023-39153
CISA-2023-39153
PUBLISHED
Reported by jenkins · Published July 26, 2023
A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Authentication Plugin 1.17.1 and earlier allows attackers to trick users into logging in to the attacker's account.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jenkins Project | Jenkins GitLab Authentication Plugin | 0 |
| Jenkins Project | Jenkins GitLab Authentication Plugin | 0, 0 |
Timeline
- Jul 26, 2023 CVE Published
- Oct 23, 2024 CVE Updated
References
- Jenkins Security Advisory 2023-07-26 vendor-advisory