Lucene search

K
freebsdFreeBSDB4DB7D78-BB62-4F4C-9326-6E9FC2DDD400
HistoryJun 14, 2023 - 12:00 a.m.

jenkins -- CSRF protection bypass vulnerability

2023-06-1400:00:00
vuxml.freebsd.org
12
jenkins
csrf
bypass
vulnerability
unix

8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

44.2%

Jenkins Security Advisory:

Description
(High) SECURITY-3135 / CVE-2023-35141
CSRF protection bypass vulnerability

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchjenkins< 2.400UNKNOWN
FreeBSDanynoarchjenkins-lts< 2.401.1UNKNOWN

8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

44.2%