Lucene search
GitHub Advisory DatabaseGHSA-7CCG-JM7J-4F8VHistoryDec 13, 2023 - 6:31 p.m.
Cross-site request forgery vulnerability in Jenkins HTMLResource Plugin
2023-12-1318:31:04
CWE-352
GitHub Advisory Database
github.com
9
cross-site request forgery
jenkins
htmlresource plugin
vulnerability
file system
security
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
23.9%
A cross-site request forgery (CSRF) vulnerability in Jenkins HTMLResource Plugin 1.02 and earlier allows attackers to delete arbitrary files on the Jenkins controller file system.
Affected configurations
Node
org.jenkins-ci.pluginshtmlresourceRange≤1.02
| Vendor | Product | Version | CPE |
|---|---|---|---|
| org.jenkins-ci.plugins | htmlresource | * | cpe:2.3:a:org.jenkins-ci.plugins:htmlresource:*:*:*:*:*:*:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2023-12-13 18:15:00
osv
osv
Cross-site request forgery vulnerability in Jenkins HTMLResource Plugin
2023-12-13 18:31:04
CVE-2023-50774
2023-12-13 18:15:44
veracode
veracode
Cross-Site Request Forgery (CSRF)
2023-12-18 06:06:37
cvelist
cvelist
CVE-2023-50774
2023-12-13 17:30:20
nvd
nvd
CVE-2023-50774
2023-12-13 18:15:44
cve
cve
CVE-2023-50774
2023-12-13 18:15:44
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-12-13)
2023-12-14 00:00:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
AI Score
7.1
Confidence
High
EPSS
0.001
Percentile
23.9%
Related for GHSA-7CCG-JM7J-4F8V