Not rated
CVE-2023-39153 A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Authentication Plugin 1.17.1 and earlier allows…
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Authentication Plugin 1.17.1 and earlier allows attackers to trick users into logging in to the attacker's account.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Gitlab Authentication Plugin 1.17 | earliest → 1.17.1 | No fix stated |
References
- Jenkins Security Advisory 2023-07-26 www.jenkins.io
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Jenkins Gitlab Authentication Plugin
The 6 CVEs of Jenkins Gitlab Authentication Plugin →
CVE-2022-27206
Jenkins GitLab Authentication Plugin 1.13 and earlier stores the GitLab client secret unencrypted in the global…
Not rated
CVE-2022-25196
Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query…
Not rated
CVE-2020-2228
Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting…
Not rated
CVE-2019-10371
A session fixation vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java…
Not rated