Executive brief
CSRF vulnerability in GitLab Authentication Plugin
Affected products
- Maven org.jenkins-ci.plugins:gitlab-oauth
Junglewise Threat Intelligence
CVE-2023-39153: CSRF vulnerability in GitLab Authentication Plugin
CVE-2023-39153 · Severity: low · CVSS 3.1 · Published 2023-07-26
Technologies: org.jenkins-ci.plugins:gitlab-oauth (Maven). Vendors: Maven.
Related threats
- Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin
- Jenkins Gitlab Authentication Plugin Open Redirect vulnerability
- Jenkins Gitlab Authentication Plugin vulnerable to Session Fixation
- Client Secret stored in plain text by Jenkins GitLab Authentication Plugin
- Open redirect vulnerability in Jenkins GitLab Authentication Plugin