Lucene search
GoogleOSV:GHSA-RR93-7C6X-8V4VHistoryFeb 15, 2023 - 3:30 p.m.
Cross-Site Request Forgery in Jenkins Azure Credentials Plugin
2023-02-1515:30:40
Google
osv.dev
11
cross-site request forgery
jenkins
azure credentials plugin
vulnerability
web server
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
29.6%
A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server.
Related
prion
prion
Cross site request forgery (csrf)
2023-02-15 14:15:00
cvelist
cvelist
CVE-2023-25767
2023-02-15 00:00:00
nvd
nvd
CVE-2023-25767
2023-02-15 14:15:13
github
github
Cross-Site Request Forgery in Jenkins Azure Credentials Plugin
2023-02-15 15:30:40
alpinelinux
alpinelinux
CVE-2023-25767
2023-02-15 14:15:13
cve
cve
CVE-2023-25767
2023-02-15 14:15:13
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
29.6%
Related for OSV:GHSA-RR93-7C6X-8V4V