Lucene search

K
githubGitHub Advisory DatabaseGHSA-96JV-C7M6-Q43G
HistoryJan 26, 2023 - 9:30 p.m.

Cross-site request forgery vulnerability in Jenkins OpenID Plugin

2023-01-2621:30:18
CWE-352
GitHub Advisory Database
github.com
4

0.001 Low

EPSS

Percentile

27.0%

A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and earlier allows attackers to trick users into logging in to the attacker’s account.

CPENameOperatorVersion
org.jenkins-ci.plugins:openidle2.4

0.001 Low

EPSS

Percentile

27.0%

Related for GHSA-96JV-C7M6-Q43G