5 matches found
Cross-Site Request Forgery (CSRF)
bazaar is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists because the library does not require POST requests for an HTTP endpoint, which allows an attacker to delete previously created Bazaar SCM tags...
5.3CVSS6.8AI score0.003EPSS
SaveExploits0References3Affected Software1
CSRF vulnerability in Bazaar Plugin
Jenkins Bazaar Plugin 1.22 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to delete previously created Bazaar SCM tags...
5.3CVSS5.4AI score0.003EPSS
SaveExploits0References4Affected Software1
CVE-2023-39156
A cross-site request forgery CSRF vulnerability in Jenkins Bazaar Plugin 1.22 and earlier allows attackers to delete previously created Bazaar SCM tags...
5.3CVSS5.9AI score0.003EPSS
SaveExploits0References2
20