Jenkins CSRF Vulnerability (CVE-2023-35141) - Linux

Jenkins is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Jenkins CSRF Vulnerability (CVE-2023-35141) - Windows

Jenkins is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Jenkins LTS < 2.401.1 / Jenkins weekly < 2.400 XSRF

According to its its self-reported version number, the version of Jenkins running on the remote web server is Jenkins LTS prior to 2.401.1 or Jenkins weekly prior to 2.400. It is, therefore, affected by the following vulnerability: - In Jenkins 2.399 and earlier, LTS 2.387.3 and earlier, POST...

org.jenkins-ci.main:jenkins-test-harness (1.556), org.jenkins-ci.main:jenkins-war (1.556) +1 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.556)

org.jenkins-ci.main:jenkins-core MAVEN version 1.556 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.556 - org.jenkins-ci.main:jenkins-war 1.556 -...

com.cloudbees.jenkins.plugins:xpdev (1.0), com.cloudbees.plugins:build-flow-plugin (0.4) +50 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.447)

org.jenkins-ci.main:jenkins-core MAVEN version 1.447 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:xpdev 1.0 - com.cloudbees.plugins:build-flow-plugin 0.4 -...

net.praqma:monkit-plugin (>=0.2.5, <=1.0.0), org.jenkins-ci.main:jenkins-test-harness (1.426) +7 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.426)

org.jenkins-ci.main:jenkins-core MAVEN version 1.426 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:monkit-plugin =0.2.5, =0.1, =1.0, =1.3 Source cves: CVE-2023-35141 Source advisory:...

com.barchart.jenkins:maven-release-cascade (>=1.0.0, <=1.3.2), org.jenkins-ci.main:jenkins-test-harness (1.503) +5 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.503)

org.jenkins-ci.main:jenkins-core MAVEN version 1.503 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.barchart.jenkins:maven-release-cascade =1.0.0, =1.15, =1.17 - org.jenkins-ci.plugins:plugin...

com.blazemeter.plugins:blazemeterjenkinsplugin (>=1.0-beta-1, <=1.08-beta-1), com.brianfromoregon:caliper-ci (2.1) +153 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.424)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.blazemeter.plugins:blazemeterjenkinsplugin =1.0-beta-1, =0.1, =0.9, =1.2.11, =1.4.0, =2.7.0...

org.jenkins-ci.main:jenkins-test-harness (1.620), org.jenkins-ci.main:jenkins-war (1.620) +2 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.620)

org.jenkins-ci.main:jenkins-core MAVEN version 1.620 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.620 - org.jenkins-ci.main:jenkins-war 1.620 -...

org.jenkins-ci.main:jenkins-test-harness (1.521), org.jenkins-ci.main:jenkins-war (1.521) +9 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.521)

org.jenkins-ci.main:jenkins-core MAVEN version 1.521 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.521 - org.jenkins-ci.main:jenkins-war 1.521 -...

org.jenkins-ci.main:jenkins-test-harness (1.414), org.jenkins-ci.main:jenkins-war (1.414) +5 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.414)

org.jenkins-ci.main:jenkins-core MAVEN version 1.414 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.414 - org.jenkins-ci.main:jenkins-war 1.414 -...

org.jenkins-ci.main:jenkins-test-harness (1.624), org.jenkins-ci.main:jenkins-war (1.624) +2 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.624)

org.jenkins-ci.main:jenkins-core MAVEN version 1.624 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.624 - org.jenkins-ci.main:jenkins-war 1.624 -...

com.nirima.jenkins.repository:jenkins-maven-plugin (>=0.6, <=0.9), com.nirima.jenkins.repository:pom (>=0.6, <=0.9) +12 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.417)

org.jenkins-ci.main:jenkins-core MAVEN version 1.417 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin =0.6, =0.6, =0.6, =1.0, =0.1, =1.1, =0.1.0,...

org.jenkins-ci.main:jenkins-test-harness (1.498), org.jenkins-ci.main:jenkins-war (1.498) +8 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.498)

org.jenkins-ci.main:jenkins-core MAVEN version 1.498 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.498 - org.jenkins-ci.main:jenkins-war 1.498 -...

org.jenkins-ci.main:jenkins-test-harness (1.497), org.jenkins-ci.main:jenkins-war (1.497) +3 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.497)

org.jenkins-ci.main:jenkins-core MAVEN version 1.497 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.497 - org.jenkins-ci.main:jenkins-war 1.497 -...

com.sonyericsson.hudson.plugins.rebuild:rebuild (>=1.10, <=1.14), org.jenkins-ci.main:jenkins-test-harness (1.405) +8 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.405)

org.jenkins-ci.main:jenkins-core MAVEN version 1.405 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.rebuild:rebuild =1.10, =1.29, =0.92, =1.33, =1.43 Source cves:...

org.jenkins-ci.main:jenkins-war (1.532.1.jenkins-19453) potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.532.1.jenkins-19453)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.1.jenkins-19453 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.532.1.jenkins-19453 Source cves: CVE-2023-351...

com.flowdock.jenkins:jenkins-flowdock-plugin (1.0.7), org.jenkins-ci.main:jenkins-test-harness (1.478) +5 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.478)

org.jenkins-ci.main:jenkins-core MAVEN version 1.478 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin 1.0.7 - org.jenkins-ci.main:jenkins-test-harness...

com.thalesgroup.jenkins-ci.plugins:scons (0.4), net.praqma:matrix-reloaded (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.413)

org.jenkins-ci.main:jenkins-core MAVEN version 1.413 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:scons 0.4 - net.praqma:matrix-reloaded =1.0.0, =1.17, =0.5,...

com.coravy.hudson.plugins.github:github (>=1.1, <=1.8), org.jenkins-ci.main:jenkins-test-harness (1.445) +7 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.445)

org.jenkins-ci.main:jenkins-core MAVEN version 1.445 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =1.1, =1.88, =1.1, =1.3 Source cves: CVE-2023-35141...