CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-24434 · ADVISORY
• jenkins.io/security/advisory/2023-01-24 · WEB
• jenkins.io/security/advisory/2023-01-24 · Vendor Advisory

Lỗ hổng khác của org.jenkins-ci.plugins:ghprb

• CVE-2023-24436TRUNG BÌNH 4.3A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to…
• CVE-2023-24435TRUNG BÌNH 6.5A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to…
• CVE-2018-1000186TRUNG BÌNH 6.5A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.j…
• CVE-2018-1000143TRUNG BÌNH 6.7An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCau…
• CVE-2018-1000142CAO 7.8An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCau…