CVE-2023-32978

2023-05-1615:59:59

jenkins

www.cve.org

jenkins

ldap plugin

csrf

vulnerability

unauthorized access

ldap server

4.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.4%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "Jenkins LDAP Plugin",
    "vendor": "Jenkins Project",
    "versions": [
      {
        "lessThan": "*",
        "status": "unaffected",
        "version": "676.vfa_64cf6b_b_002",
        "versionType": "maven"
      },
      {
        "lessThan": "671.*",
        "status": "unaffected",
        "version": "671.673.vc045dcdd856b_",
        "versionType": "maven"
      },
      {
        "lessThan": "2.10.*",
        "status": "unaffected",
        "version": "2.10.1",
        "versionType": "maven"
      }
    ]
  }
]