CVE-2023-40341

2023-08-1614:32:52

jenkins

www.cve.org

cve-2023-40341

cross-site request forgery

jenkins blue ocean plugin

github credentials

EPSS

0.001

Percentile

30.2%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "Jenkins Blue Ocean Plugin",
    "vendor": "Jenkins Project",
    "versions": [
      {
        "lessThan": "*",
        "status": "unaffected",
        "version": "1.27.5.1",
        "versionType": "maven"
      },
      {
        "status": "unaffected",
        "version": "1.27.4.1"
      }
    ]
  }
]