CSRF vulnerability in Synopsys Jenkins Coverity Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-23847 · ADVISORY
• community.synopsys.com/s/article/SIG-Product-Security-Advisory-Multiple-CVEs-affecting-Coverity-Jenkins-Plugin · WEB
• jenkins.io/security/advisory/2023-02-15 · WEB
• jenkins.io/security/advisory/2023-02-15

org.jenkins-ci.plugins:synopsys-coverity のその他の脆弱性

• CVE-2023-23850中 4.3A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate …
• CVE-2023-23848中 4.3Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to a…