Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-32978HistoryMay 16, 2023 - 4:15 p.m.
CVE-2023-32978
2023-05-1616:15:10
Alpine Linux Development Team
security.alpinelinux.org
2
cve-2023-32978
cross-site request forgery
jenkins
ldap plugin
unauthorized access
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
0.0005 Low
EPSS
Percentile
16.4%
A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | jenkins | = 2.387.3-r0 | UNKNOWN |
| Alpine | edge-community | noarch | jenkins | = 2.440.2-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | jenkins | = 2.440.3-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | jenkins | = 2.440.2-r0 | UNKNOWN |
Related
nvd
nvd
CVE-2023-32978
2023-05-16 16:15:10
osv
osv
Jenkins LDAP Plugin vulnerable to Cross-Site Request Forgery
2023-05-16 18:30:16
cvelist
cvelist
CVE-2023-32978
2023-05-16 15:59:59
cve
cve
CVE-2023-32978
2023-05-16 16:15:10
prion
prion
Cross site request forgery (csrf)
2023-05-16 16:15:00
github
github
Jenkins LDAP Plugin vulnerable to Cross-Site Request Forgery
2023-05-16 18:30:16
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
0.0005 Low
EPSS
Percentile
16.4%
Related for ALPINE:CVE-2023-32978