Executive brief
Jenkins WSO2 Oauth Plugin cross-site request forgery vulnerability
Affected products
- Maven org.jenkins-ci.plugins:wso2id-oauth
Junglewise Threat Intelligence
CVE-2023-33006: Jenkins WSO2 Oauth Plugin cross-site request forgery vulnerability
CVE-2023-33006 · Severity: low · CVSS 3.1 · Published 2023-05-16
Technologies: org.jenkins-ci.plugins:wso2id-oauth (Maven). Vendors: Maven.
Related threats
- Jenkins WSO2 Oauth Plugin Fails to Properly Authenticate User Credentials
- Jenkins WSO2 Oauth Plugin Session Fixation vulnerability
- Jenkins WSO2 Oauth Plugin does not mask the WSO2 Oauth client secret on the global configuration form
- Jenkins WSO2 Oauth Plugin stores WSO2 Oauth client secret unencrypted in global config.xml file on Jenkins controller