Lucene search
PRIOn knowledge basePRION:CVE-2023-41935HistorySep 06, 2023 - 1:15 p.m.
Cross site request forgery (csrf)
2023-09-0613:15:00
PRIOn knowledge base
www.prio-n.com
1
cross site request forgery
jenkins
azure ad plugin
nonce comparison
0.001 Low
EPSS
Percentile
37.3%
Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when checking whether the provided and expected CSRF protection nonce are equal, potentially allowing attackers to use statistical methods to obtain a valid nonce.
| CPE | Name | Operator | Version |
|---|---|---|---|
| azure_ad | eq | >= 378.vd6e2874a-69eb AND <= 396.v86ce29279947 | |
| azure_ad | eq | <= 348.vefd11eea-20b |
Related
nvd
nvd
CVE-2023-41935
2023-09-06 13:15:10
osv
osv
CVE-2023-41935
2023-09-06 13:15:10
cvelist
cvelist
CVE-2023-41935
2023-09-06 12:08:55
alpinelinux
alpinelinux
CVE-2023-41935
2023-09-06 13:15:10
cve
cve
CVE-2023-41935
2023-09-06 13:15:10
github
github
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-09-06)
2023-09-07 00:00:00