Lucene search
PRIOn knowledge basePRION:CVE-2023-24432HistoryJan 26, 2023 - 9:18 p.m.
Cross site request forgery (csrf)
2023-01-2621:18:00
PRIOn knowledge base
www.prio-n.com
1
cross-site request forgery
jenkins orka
macstadium
unauthorized access
http server
credentials capture
A cross-site request forgery (CSRF) vulnerability in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
| CPE | Name | Operator | Version |
|---|---|---|---|
| orka_by_macstadium | lt | 1.32 |
Related
cvelist
cvelist
CVE-2023-24432
2023-01-24 00:00:00
github
github
CSRF vulnerability in Jenkins Orka Plugin allow capturing credentials
2023-01-26 21:30:18
osv
osv
CSRF vulnerability in Jenkins Orka Plugin allow capturing credentials
2023-01-26 21:30:18
cve
cve
CVE-2023-24432
2023-01-26 21:18:17
nvd
nvd
CVE-2023-24432
2023-01-26 21:18:17
nessus
nessus