A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: jenkins
Published: 2023-08-16T14:32:52.615Z
Updated: 2024-08-02T18:31:53.657Z
Reserved: 2023-08-14T16:02:56.435Z
Link: CVE-2023-40341
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-08-16T15:15:11.683
Modified: 2023-08-18T20:04:57.107
Link: CVE-2023-40341
Redhat