Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-32995
HistoryMay 16, 2023 - 5:15 p.m.

Cross site request forgery (csrf)

2023-05-1617:15:00
PRIOn knowledge base
www.prio-n.com
5
cross-site request forgery
jenkins saml sso plugin
csrf attack
miniorange api
vulnerability

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers to send an HTTP POST request with JSON body containing attacker-specified content, to miniOrange’s API for sending emails.

CPENameOperatorVersion
saml_single_sign_onle2.0.0

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

Related for PRION:CVE-2023-32995