Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-50768
HistoryDec 13, 2023 - 6:15 p.m.

Cross site request forgery (csrf)

2023-12-1318:15:00
PRIOn knowledge base
www.prio-n.com
3
cross-site request forgery
jenkins nexus platform plugin
vulnerability
http server
credentials capture

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

CPENameOperatorVersion
nexus_platformeq<= 3.18.0-3

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

Related for PRION:CVE-2023-50768