CSRF vulnerability in Jenkins Orka Plugin allow capturing credentials

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-24432 · ADVISORY
• jenkins.io/security/advisory/2023-01-24 · WEB
• jenkins.io/security/advisory/2023-01-24 · Vendor Advisory

io.jenkins.plugins:macstadium-orka のその他の脆弱性

• CVE-2023-37949高 7.1A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read permission to connect to…
• CVE-2023-24433中 6.5Missing permission checks in Jenkins Orka by MacStadium Plugin 1.31 and earlier allow attackers with Overall/Read permission to connect to a…
• CVE-2023-24431中 4.3A missing permission check in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers with Overall/Read permission to enumerate …