GHSA-RR93-7C6X-8V4V Cross-Site Request Forgery in Jenkins Azure Credentials Plugin

A cross-site request forgery CSRF vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server...

org.jenkins-ci.plugins:azure-acs (0.2.4) potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.6.1)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.4 Source cves: CVE-2023-25767 Source...

org.jenkins-ci.plugins:azure-acs (>=0.1.4, <=0.1.5), org.jenkins-ci.plugins:azure-app-service (0.1.3) +4 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.3)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.4, =0.3.0, =0.4.8, =0.6.0 -...

org.jenkins-ci.plugins:azure-acs (>=0.1.0, <=0.1.3), org.jenkins-ci.plugins:azure-app-service (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.2)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.0, =0.1.1, =0.1.0, =0.1.1 Source cves:...

org.jenkins-ci.plugins:azure-acs (0.2.3), org.jenkins-ci.plugins:azure-app-service (>=0.3.0, <=0.4.2) +6 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.6.0)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.3 - org.jenkins-ci.plugins:azure-app-servi...

org.jenkins-ci.plugins:azure-acs (>=0.2.0, <=0.2.2), org.jenkins-ci.plugins:azure-app-service (0.2.0) +3 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.4.0)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.2.0, =0.6.1, =0.9.0 -...

org.jenkins-ci.plugins:azure-vmss (0.1.1) potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.3.1)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-vmss 0.1.1 Source cves: CVE-2023-25766 Source...

org.jenkins-ci.plugins:azure-acs (0.2.4) potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.6.1)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.4 Source cves: CVE-2023-25766 Source...

org.jenkins-ci.plugins:azure-acs (>=0.1.4, <=0.1.5), org.jenkins-ci.plugins:azure-app-service (0.1.3) +4 more potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.3)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.4, =0.3.0, =0.4.8, =0.6.0 -...

org.jenkins-ci.plugins:azure-app-service (0.1) potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.0)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-app-service 0.1 Source cves: CVE-2023-25766 Source...

org.jenkins-ci.plugins:azure-acs (0.2.3), org.jenkins-ci.plugins:azure-app-service (>=0.3.0, <=0.4.2) +6 more potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.6.0)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.3 - org.jenkins-ci.plugins:azure-app-servi...

org.jenkins-ci.plugins:azure-acs (0.2.3), org.jenkins-ci.plugins:azure-app-service (>=0.3.0, <=0.4.2) +6 more potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (1.6.0)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs 0.2.3 - org.jenkins-ci.plugins:azure-app-servi...

org.jenkins-ci.plugins:azure-acs (>=0.1.4, <=0.1.5), org.jenkins-ci.plugins:azure-app-service (0.1.3) +4 more potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (1.3)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.4, =0.3.0, =0.4.8, =0.6.0 -...

org.jenkins-ci.plugins:azure-vmss (0.1.1) potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (1.3.1)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-vmss 0.1.1 Source cves: CVE-2023-25768 Source...

org.jenkins-ci.plugins:azure-app-service (0.1) potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (1.0)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-app-service 0.1 Source cves: CVE-2023-25768 Source...

org.jenkins-ci.plugins:azure-acs (>=0.1.0, <=0.1.3), org.jenkins-ci.plugins:azure-app-service (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (1.2)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.0, =0.1.1, =0.1.0, =0.1.1 Source cves:...

org.jenkins-ci.plugins:azure-acs (>=0.1.0, <=0.1.3), org.jenkins-ci.plugins:azure-app-service (>=0.1.1, <=0.1.2) +1 more potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.2)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.0, =0.1.1, =0.1.0, =0.1.1 Source cves:...

org.jenkins-ci.plugins:azure-acs (>=0.2.0, <=0.2.2), org.jenkins-ci.plugins:azure-app-service (0.2.0) +3 more potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.4.0)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.2.0, =0.6.1, =0.9.0 -...

CVE-2023-25767

A cross-site request forgery CSRF vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server...

CVE-2023-25766

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...