Lucene search
Veracode Vulnerability DatabaseVERACODE:41030HistoryJun 27, 2023 - 8:06 a.m.
Cross-Site Request Forgery (CSRF)
2023-06-2708:06:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
jenkins
digital.ai
app management
csrf
http
authentication
attacker
unauthorized actions
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
39.6%
Jenkins Digital.ai App Management Publisher Plugin is vulnerable to Cross-Site Request Forgery (CSRF). The vulnerability exists because some HTTP endpoints do not require authentication, which allows an attacker to perform unauthorized actions.
Related
redhatcve
redhatcve
CVE-2023-35148
2023-07-04 05:17:25
nvd
nvd
CVE-2023-35148
2023-06-14 13:15:12
osv
osv
github
github
prion
prion
Cross site request forgery (csrf)
2023-06-14 13:15:00
cvelist
cvelist
CVE-2023-35148
2023-06-14 12:53:10
cve
cve
CVE-2023-35148
2023-06-14 13:15:12
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-06-14)
2023-06-16 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
39.6%
Related for VERACODE:41030