CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2023/09/06 1:15 p.m.•41 views

CVE-2023-41938

A cross-site request forgery CSRF vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules...

6.5CVSS7.1AI score0.00359EPSS

SaveExploits0References2

Mend•added 2023/09/06 12:08 p.m.•30 views

CVE-2023-41938

A cross-site request forgery CSRF vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules...

7.1CVSS6.5AI score0.00359EPSS

SaveExploits0References3

Jenkins Security Advisories•added 2023/09/06 12:00 a.m.•25 views

CSRF vulnerability in ivy

ivy 2.5 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to delete disabled modules. As of publication of this advisory, there is no fix. Learn why we announce this...

6.5CVSS6.5AI score0.00359EPSS

SaveExploits0Affected Software1

Rapid7 Vulnerability Database (full)•added 2023/09/06 12:00 a.m.•4 views

CVE-2023-41938: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules...

6.5CVSS6.5AI score0.00359EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by