CVE-2023-24434

The CVE-2023-24434 entry concerns Jenkins GitHub Pull Request Builder Plugin (versions ≤1.42.2). The vulnerability is a cross-site request forgery (CSRF) that allows an attacker to connect to an attacker‑specified URL using attacker‑specified credentials IDs, enabling capture of credentials store...