Cross site request forgery (csrf)

2023-10-2518:17:00

PRIOn knowledge base

www.prio-n.com

cross site request forgery

jenkins plugin

sensitive credentials

access token

info level

exposure

nvd

0.0005 Low

EPSS

Percentile

18.3%

JSON

Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level, potentially resulting in its exposure.

CPENameOperatorVersion
lambdatest-automationlt1.21.0

CPE	Name	Operator	Version
	lambdatest-automation	lt	1.21.0

References

www.openwall.com/lists/oss-security/2023/10/25/2

www.jenkins.io/security/advisory/2023-10-25/

0.0005 Low

EPSS

Percentile

18.3%

JSON

Related for PRION:CVE-2023-46653