RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2024:0777)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0777 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

CVE-2023-40337

creationtimestamp| type| source ---|---|--- 2023-08-16 18:49:47+00:00| seen| https://t.me/cibsecurity/68657...

org.jenkins-ci.plugins.workflow:workflow-multibranch (>=1.11-beta-2, <=1.11-beta-3), org.jenkins-ci.plugins:branch-api (>=0.2-beta-6, <=0.2-beta-7) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.1-beta-1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-multibranch =1.11-beta-2,...

org.jenkins-ci.plugins:job-dsl (1.19) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (4.0)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:job-dsl 1.19 Source cves: CVE-2023-40337 Source advisory:...

org.jenkins-ci.plugins:global-build-stats (>=1.4, <=1.5) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (4.9)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:global-build-stats =1.4, =1.5 Source cves: CVE-2023-40337...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.4, <=0.4.1), org.jenkins-ci.plugins.workflow:workflow-multibranch (>=1.11, <=1.14-beta-1) +3 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.4, =1.11, =1.0...

io.jenkins.blueocean:blueocean (>=1.0-alpha-1, <=1.0-alpha-2), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-1, <=1.0-alpha-2) +5 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.2.1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1,...

org.jenkins-ci.plugins:github-organization-folder (>=1.0-beta-1, <=1.2) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.3)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:github-organization-folder =1.0-beta-1, =1.2 Source cves:...

io.jenkins.blueocean:blueocean (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1), io.jenkins.blueocean:blueocean-config (>=1.0.0-b19-beta-1, <=1.0.0-b21-beta-1) +8 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.17-beta-1)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.17-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b19-beta-1, =1.0.0-b19-beta-1,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), io.jenkins.blueocean:blueocean (>=1.0.0-b22, <=1.0.0-b24) +12 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (5.17)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.0.0-b22...

org.jenkins-ci.plugins:job-dsl (>=1.20, <=1.28) potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (4.2)

org.jenkins-ci.plugins:cloudbees-folder MAVEN version 4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - org.jenkins-ci.plugins:job-dsl =1.20, =1.28 Source cves: CVE-2023-40337 Source...

CVE-2023-40337

A cross-site request forgery CSRF vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy a view inside a folder...

CVE-2023-40337

A cross-site request forgery CSRF vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy a view inside a folder...

CVE-2023-40337

CVE-2023-40337: Jenkins Folders Plugin CSRF vulnerability affecting version 6.846.v23698686f0f6 and earlier. A CSRF flaw allows an attacker to copy a view inside a folder. Impact details and CVSS data are provided in the initial document (CVSS v3.1 base score 4.3, MEDIUM). Connected documents con...

CVE-2023-40337

A cross-site request forgery CSRF vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy a view inside a folder...