Lucene search
HistoryFeb 15, 2023 - 2:15 p.m.
CVE-2023-25767
cve-2023-25767
cross-site request forgery
jenkins
azure credentials plugin
web server connect
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
35.0%
A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server.
Affected configurations
Node
jenkinsazure_credentialsRange<254.v64da_8176c83ajenkins
| Vendor | Product | Version | CPE |
|---|---|---|---|
| jenkins | azure_credentials | * | cpe:2.3:a:jenkins:azure_credentials:*:*:*:*:*:jenkins:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2023-02-15 14:15:00
cvelist
cvelist
CVE-2023-25767
2023-02-15 00:00:00
github
github
Cross-Site Request Forgery in Jenkins Azure Credentials Plugin
2023-02-15 15:30:40
osv
osv
Cross-Site Request Forgery in Jenkins Azure Credentials Plugin
2023-02-15 15:30:40
alpinelinux
alpinelinux
CVE-2023-25767
2023-02-15 14:15:13
cve
cve
CVE-2023-25767
2023-02-15 14:15:13
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
35.0%
Related for NVD:CVE-2023-25767