Lucene search
Veracode Vulnerability DatabaseVERACODE:40620HistoryMay 21, 2023 - 10:09 a.m.
Cross-Site Request Forgery (CSRF)
2023-05-2110:09:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
cross-site request forgery
jenkins
ldap
software
0.001 Low
EPSS
Percentile
38.8%
org.jenkins-ci.plugins:reverse-proxy-auth-plugin is vulnerable to Cross-Site Request Forgery (CSRF). An attacker is able to connect to an attacker-specified LDAP server using attacker-specified credentials, because the library does not require POST requests for a form validation method, resulting in a cross-site request forgery.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jenkins reverse proxy auth plugin | le | 1.7.4 | |
| jenkins reverse proxy auth plugin | le | 1.7.4 |
Related
cve
cve
CVE-2023-32987
2023-05-16 16:15:11
osv
osv
Jenkins Reverse Proxy Auth Plugin cross-site request forgery vulnerability
2023-05-16 18:30:16
CVE-2023-32987
2023-05-16 16:15:11
nvd
nvd
CVE-2023-32987
2023-05-16 16:15:11
prion
prion
Cross site request forgery (csrf)
2023-05-16 16:15:00
cvelist
cvelist
CVE-2023-32987
2023-05-16 16:00:08
github
github
Jenkins Reverse Proxy Auth Plugin cross-site request forgery vulnerability
2023-05-16 18:30:16
