Lucene search
PRIOn knowledge basePRION:CVE-2023-3414HistoryJul 26, 2023 - 7:15 p.m.
Cross site request forgery (csrf)
2023-07-2619:15:00
PRIOn knowledge base
www.prio-n.com
2
csrf vulnerability
jenkins plug-in
servicenow devops
version 1.38.1
sensitve information
0.001 Low
EPSS
Percentile
22.9%
A cross-site request forgery vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information. To address this issue, apply the 1.38.1 version of the Jenkins plug-in for ServiceNow DevOps on your Jenkins server. No changes are required on your instances of the Now Platform.
| CPE | Name | Operator | Version |
|---|---|---|---|
| servicenow_devops | lt | 1.38.1 |
Related
cve
cve
CVE-2023-3414
2023-07-26 19:15:09
cvelist
cvelist
nvd
nvd
CVE-2023-3414
2023-07-26 19:15:09
osv
osv
Credential leakage in Jenkins Plug-in for ServiceNow
2023-07-26 21:30:18
github
github
Credential leakage in Jenkins Plug-in for ServiceNow
2023-07-26 21:30:18
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-07-26)
2023-07-28 00:00:00