Executive brief
Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability
Affected products
- Maven io.jenkins.plugins:neuvector-vulnerability-scanner
Junglewise Threat Intelligence
CVE-2023-49673: Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability
CVE-2023-49673 · Severity: low · CVSS 3.1 · Published 2023-11-29
Technologies: io.jenkins.plugins:neuvector-vulnerability-scanner (Maven). Vendors: Maven.
Related threats
- Jenkins NeuVector Vulnerability Scanner Plugin missing permission check
- Jenkins NeuVector Vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validation
- Content-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin
- Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text