Lucene search
GoogleOSV:GHSA-PX2F-CQRF-F2QGHistoryJan 26, 2023 - 9:30 p.m.
CSRF vulnerability in Jenkins TestQuality Updater Plugin
2023-01-2621:30:18
Google
osv.dev
11
jenkins
testquality updater
csrf
vulnerability
attacker-specified url
username
password
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
33.0%
A cross-site request forgery (CSRF) vulnerability in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password.
Related
prion
prion
Cross site request forgery (csrf)
2023-01-26 21:18:00
cve
cve
CVE-2023-24452
2023-01-26 21:18:18
github
github
CSRF vulnerability in Jenkins TestQuality Updater Plugin
2023-01-26 21:30:18
cvelist
cvelist
CVE-2023-24452
2023-01-24 00:00:00
nvd
nvd
CVE-2023-24452
2023-01-26 21:18:18
nessus
nessus
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
33.0%
Related for OSV:GHSA-PX2F-CQRF-F2QG