Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-28674HistoryApr 02, 2023 - 9:15 p.m.
CVE-2023-28674
2023-04-0221:15:09
Alpine Linux Development Team
security.alpinelinux.org
11
cve-2023-28674
cross-site request forgery
jenkins octoperf load testing plugin
octoperf server
attacker-specified credentials
unix
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.2%
A cross-site request forgery (CSRF) vulnerability in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers to connect to a previously configured Octoperf server using attacker-specified credentials.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.17-community | noarch | jenkins | = 2.361.2-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | jenkins | = 2.387.3-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | jenkins | = 2.440.3-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | jenkins | = 2.440.2-r0 | UNKNOWN |
| Alpine | edge-community | noarch | jenkins | = 2.462.1-r0 | UNKNOWN |
Related
nvd
nvd
CVE-2023-28674
2023-04-02 21:15:09
cvelist
cvelist
CVE-2023-28674
2023-03-23 11:26:03
osv
osv
prion
prion
Cross site request forgery (csrf)
2023-04-02 21:15:00
github
github
cve
cve
CVE-2023-28674
2023-04-02 21:15:09
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.2%
Related for ALPINE:CVE-2023-28674