Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-25767HistoryFeb 15, 2023 - 2:15 p.m.
CVE-2023-25767
2023-02-1514:15:13
Alpine Linux Development Team
security.alpinelinux.org
8
cve-2023-25767
cross-site request forgery
jenkins azure credentials plugin
attackers
web server
unix
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
29.6%
A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.17-community | noarch | jenkins | = 2.361.2-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | jenkins | = 2.387.3-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | jenkins | = 2.440.3-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | jenkins | = 2.440.2-r0 | UNKNOWN |
| Alpine | edge-community | noarch | jenkins | = 2.452.2-r0 | UNKNOWN |
Related
prion
prion
Cross site request forgery (csrf)
2023-02-15 14:15:00
cvelist
cvelist
CVE-2023-25767
2023-02-15 00:00:00
nvd
nvd
CVE-2023-25767
2023-02-15 14:15:13
github
github
Cross-Site Request Forgery in Jenkins Azure Credentials Plugin
2023-02-15 15:30:40
osv
osv
Cross-Site Request Forgery in Jenkins Azure Credentials Plugin
2023-02-15 15:30:40
cve
cve
CVE-2023-25767
2023-02-15 14:15:13
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
29.6%
Related for ALPINE:CVE-2023-25767