Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-2195HistoryMay 16, 2023 - 7:15 p.m.
CVE-2023-2195
2023-05-1619:15:08
Alpine Linux Development Team
security.alpinelinux.org
6
cross-site request forgery
jenkins code dx plugin
cve-2023-2195
attacker-specified url
unix
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
0.0004 Low
EPSS
Percentile
13.1%
A cross-site request forgery (CSRF) vulnerability in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | jenkins | = 2.387.3-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | jenkins | = 2.440.3-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | jenkins | = 2.440.2-r0 | UNKNOWN |
| Alpine | edge-community | noarch | jenkins | = 2.452.2-r0 | UNKNOWN |
Related
cve
cve
CVE-2023-2195
2023-05-16 19:15:08
osv
osv
Jenkins Code Dx Plugin cross-site request forgery vulnerability
2023-05-16 21:30:22
veracode
veracode
Cross-Site Request Forgery (CSRF)
2023-05-30 07:10:39
prion
prion
Cross site request forgery (csrf)
2023-05-16 19:15:00
github
github
Jenkins Code Dx Plugin cross-site request forgery vulnerability
2023-05-16 21:30:22
cvelist
cvelist
CVE-2023-2195 CSRF vulnerability and missing permission checks in Code Dx Plugin
2023-05-16 18:02:33
nvd
nvd
CVE-2023-2195
2023-05-16 19:15:08
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
0.0004 Low
EPSS
Percentile
13.1%
Related for ALPINE:CVE-2023-2195