CVE-2023-24457

Summary

A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account.

Affected Software

VendorProductVersion RangeStatus
Jenkins ProjectJenkins Keycloak Authentication Pluginunspecified <= 2.3.0affected
Jenkins ProjectJenkins Keycloak Authentication Pluginnext of 2.3.0 < unspecifiedunknown

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References