Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-30529HistoryApr 12, 2023 - 6:15 p.m.
CVE-2023-30529
2023-04-1218:15:12
Alpine Linux Development Team
security.alpinelinux.org
5
jenkins
lucene-search plugin
http endpoint
reindex
database
vulnerability
cve-2023-30529
unix
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
41.8%
Jenkins Lucene-Search Plugin 387.v938a_ecb_f7fe9 and earlier does not require POST requests for an HTTP endpoint, allowing attackers to reindex the database.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.17-community | noarch | jenkins | = 2.361.2-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | jenkins | = 2.387.3-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | jenkins | = 2.440.3-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | jenkins | = 2.440.2-r0 | UNKNOWN |
| Alpine | edge-community | noarch | jenkins | = 2.452.2-r0 | UNKNOWN |
Related
cvelist
cvelist
CVE-2023-30529
2023-04-12 17:05:17
cve
cve
CVE-2023-30529
2023-04-12 18:15:12
osv
osv
Jenkins Lucene-Search Plugin vulnerable to Cross-Site Request Forgery
2023-04-12 18:30:36
nvd
nvd
CVE-2023-30529
2023-04-12 18:15:12
prion
prion
Code injection
2023-04-12 18:15:00
github
github
Jenkins Lucene-Search Plugin vulnerable to Cross-Site Request Forgery
2023-04-12 18:30:36
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
41.8%
Related for ALPINE:CVE-2023-30529