Lucene search
HistoryMay 16, 2023 - 7:15 p.m.
CVE-2023-2195
cross-site request forgery
jenkins
code dx plugin
cve-2023-2195
vulnerability
security
3.5 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
4.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.1%
A cross-site request forgery (CSRF) vulnerability in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL.
Affected configurations
Node
jenkinscode_dxRange≤3.1.0jenkins
Related
veracode
veracode
Cross-Site Request Forgery (CSRF)
2023-05-30 07:10:39
cve
cve
CVE-2023-2195
2023-05-16 19:15:08
osv
osv
Jenkins Code Dx Plugin cross-site request forgery vulnerability
2023-05-16 21:30:22
prion
prion
Cross site request forgery (csrf)
2023-05-16 19:15:00
github
github
Jenkins Code Dx Plugin cross-site request forgery vulnerability
2023-05-16 21:30:22
cvelist
cvelist
CVE-2023-2195 CSRF vulnerability and missing permission checks in Code Dx Plugin
2023-05-16 18:02:33
alpinelinux
alpinelinux
CVE-2023-2195
2023-05-16 19:15:08
3.5 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
4.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.1%
Related for NVD:CVE-2023-2195