Lucene search

PRIOn knowledge basePRION:CVE-2023-41942

HistorySep 06, 2023 - 1:15 p.m.

Cross site request forgery (csrf)

2023-09-0613:15:00

PRIOn knowledge base

www.prio-n.com

cross-site request forgery

jenkins

aws codecommit trigger plugin

3.0.12

vulnerability

clear

sqs queue

nvd

4.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers to clear the SQS queue.

CPENameOperatorVersion
aws_codecommit_triggerle3.0.12

CPE	Name	Operator	Version
	aws_codecommit_trigger	le	3.0.12

References

www.openwall.com/lists/oss-security/2023/09/06/9

www.jenkins.io/security/advisory/2023-09-06/