CVE-2023-37961

Summary

A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to trick users into logging in to the attacker's account.

Affected Software

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

• https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-2988
• http://www.openwall.com/lists/oss-security/2023/07/12/2

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-2988
• http://www.openwall.com/lists/oss-security/2023/07/12/2

• ←Previous
• Next→