Lucene search
GitHub Advisory DatabaseGHSA-RR93-7C6X-8V4VHistoryFeb 15, 2023 - 3:30 p.m.
Cross-Site Request Forgery in Jenkins Azure Credentials Plugin
2023-02-1515:30:40
CWE-352
GitHub Advisory Database
github.com
5
cross-site request forgery
jenkins
azure
credentials plugin
vulnerability
unauthorized access
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
29.6%
A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server.
Affected configurations
Node
org.jenkins-ci.plugins\Matchazure-keyvault
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:azure-credentials | le | 253.v887e0f9e898b |
Related
prion
prion
Cross site request forgery (csrf)
2023-02-15 14:15:00
cvelist
cvelist
CVE-2023-25767
2023-02-15 00:00:00
nvd
nvd
CVE-2023-25767
2023-02-15 14:15:13
osv
osv
Cross-Site Request Forgery in Jenkins Azure Credentials Plugin
2023-02-15 15:30:40
alpinelinux
alpinelinux
CVE-2023-25767
2023-02-15 14:15:13
cve
cve
CVE-2023-25767
2023-02-15 14:15:13
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
29.6%
Related for GHSA-RR93-7C6X-8V4V