CVE-2023-24423

2023-01-2400:00:00

jenkins

www.cve.org

cross-site request forgery

jenkins gerrit trigger plugin

vulnerability

attackers

rebuild builds

0.0005 Low

EPSS

Percentile

17.2%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plugin 2.38.0 and earlier allows attackers to rebuild previous builds triggered by Gerrit.

CNA Affected

[
  {
    "product": "Jenkins Gerrit Trigger Plugin",
    "vendor": "Jenkins Project",
    "versions": [
      {
        "lessThanOrEqual": "2.38.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2137

0.0005 Low

EPSS

Percentile

17.2%

JSON

Related for CVELIST:CVE-2023-24423