A cross-site request forgery (CSRF) vulnerability in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: jenkins
Published: 2023-06-14T12:53:10.250Z
Updated: 2024-08-02T16:23:59.299Z
Reserved: 2023-06-14T08:58:33.245Z
Link: CVE-2023-35148
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-06-14T13:15:12.220
Modified: 2023-06-26T12:55:34.460
Link: CVE-2023-35148
Redhat