Lucene search
+L

CVE-2023-35141

🗓️ 14 Jun 2023 13:15:00Reported by Alpine Linux Development TeamType 
alpinelinux
 alpinelinux
🔗 security.alpinelinux.org👁 39 Views

Jenkins 2.399 and LTS 2.387.3 and earlier allow for potential endpoint manipulation via insufficiently escaped user-provided values in the URL, leading to a victim sending a POST request to an unexpected endpoint by opening a context menu

Related
Packages
ReporterTitlePublishedViews
Family
freebsd
jenkins -- CSRF protection bypass vulnerability
14 Jun 202300:00
freebsd
cnnvd
Jenkins 跨站请求伪造漏洞
14 Jun 202300:00
cnnvd
cve
CVE-2023-35141
14 Jun 202312:53
cve
cvelist
CVE-2023-35141
14 Jun 202312:53
cvelist
euvd
EUVD-2023-1762
3 Oct 202520:07
euvd
nessus
FreeBSD : jenkins -- CSRF protection bypass vulnerability (b4db7d78-bb62-4f4c-9326-6e9fc2ddd400)
14 Jun 202300:00
nessus
nessus
Jenkins LTS < 2.401.1 / Jenkins weekly < 2.400 XSRF
16 Jun 202300:00
nessus
github
Jenkins CSRF protection bypass vulnerability
14 Jun 202315:30
github
ncsc
Vulnerabilities fixed in Oracle Communications products
18 Apr 202400:00
ncsc
nvd
CVE-2023-35141
14 Jun 202313:15
nvd
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Alpine3.18-communitynoarchjenkins2.387.3-r0UNKNOWN

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 Jun 2023 19:36Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.18
EPSS0.0086
SSVC
39