3 matches found
CVE-2023-33005
Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on login...
5.4CVSS6.8AI score0.00431EPSS
SaveExploits0References1
CVE-2023-33005
CVE-2023-33005 concerns the Jenkins WSO2 Oauth Plugin (1.0 and earlier) not invalidating a previous login session, creating a session-fixation risk. The vulnerability is described across multiple sources as allowing an attacker to reuse an existing authenticated session or trick a user into a log...
5.4CVSS5.5AI score0.00431EPSS
SaveExploits0References1Affected Software1
20