Executive brief
CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin
Affected products
- Maven org.jenkins-ci.plugins:ghprb
Junglewise Threat Intelligence
CVE-2023-24434: CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin
CVE-2023-24434 · Severity: low · CVSS 3.1 · Published 2023-01-26
Technologies: org.jenkins-ci.plugins:ghprb (Maven). Vendors: Maven.
Related threats
- Missing permission checks in Jenkins GitHub Pull Request Builder Plugin
- Jenkins GitHub Pull Request Builder Plugin missing permission check allows enumerating credentials IDs
- Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials
- Jenkins GitHub Pull Request Builder Plugin
- Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability