CVE-2023-39156

CVE-2023-39156 is a CSRF vulnerability in Jenkins Bazaar Plugin 1.22 and earlier. The issue arises because the plugin does not require POST requests on a specific HTTP endpoint, allowing an attacker to delete previously created Bazaar SCM tags. Impact is limited to the ability to delete tags; no ...