Executive brief
Jenkins GitHub Pull Request Builder Plugin missing permission check allows enumerating credentials IDs
Affected products
- Maven org.jenkins-ci.plugins:ghprb
Junglewise Threat Intelligence
CVE-2023-24436: Jenkins GitHub Pull Request Builder Plugin missing permission check allows enumerating credentials IDs
CVE-2023-24436 · Severity: low · CVSS 3.1 · Published 2023-01-26
Technologies: org.jenkins-ci.plugins:ghprb (Maven). Vendors: Maven.
Related threats
- Missing permission checks in Jenkins GitHub Pull Request Builder Plugin
- CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin
- Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials
- Jenkins GitHub Pull Request Builder Plugin
- Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability