Lucene search

Cross-site request forgery vulnerability in Jenkins Bitbucket OAuth Plugin

🗓️ 26 Jan 2023 21:18:30Reported by GoogleType

osv🔗 osv.dev👁 10 Views

Jenkins Bitbucket OAuth Plugin CSRF vulnerability

Reporter	Title	Published	Views	Family All 8
Github Security Blog	Cross-site request forgery vulnerability in Jenkins Bitbucket OAuth Plugin	26 Jan 202321:30	–	github
Prion	Cross site request forgery (csrf)	26 Jan 202321:18	–	prion
CVE	CVE-2023-24428	26 Jan 202321:18	–	cve
NVD	CVE-2023-24428	26 Jan 202321:18	–	nvd
OSV	CVE-2023-24428	26 Jan 202321:18	–	osv
Cvelist	CVE-2023-24428	24 Jan 202300:00	–	cvelist
Tenable Nessus	Jenkins Enterprise and Operations Center 2.346.x < 2.346.40.0.7 Multiple Vulnerabilities (CloudBees Security Advisory 2023-01-24)	24 Jan 202300:00	–	nessus
Tenable Nessus	Jenkins plugins Multiple Vulnerabilities (2023-01-24)	27 Feb 202300:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-24428
github	www.github.com/jenkinsci/bitbucket-oauth-plugin/commit/a927a8ff2e069afebb97f33f6798033ef4451e4f
github	www.github.com/jenkinsci/bitbucket-oauth-plugin
jenkins	www.jenkins.io/security/advisory/2023-01-24/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Jan 2023 21:30Current

5.4Medium risk

Vulners AI Score5.4

CVSS35.7

EPSS0.001