Sign in

Not rated

CVE-2023-41942 A cross-site request forgery (CSRF) vulnerability in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers to clear the SQS queue.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins AWS CodeCommit Trigger Plugin 3.0	earliest → 3.0.12	No fix stated

The 5 CVEs of Jenkins AWS CodeCommit Trigger Plugin →

CVE-2023-41944 Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not escape the queue name parameter passed to a form… Not rated CVE-2023-41943 Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not perform a permission check in an HTTP endpoint,… Not rated CVE-2023-41941 A missing permission check in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers with… Not rated CVE-2023-35147 Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an… 6.5 Medium

Do you use Jenkins AWS CodeCommit Trigger Plugin?

Track this CVE Watch Jenkins AWS CodeCommit Trigger Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-41942

Timeline

Published September 6, 2023
Last modified September 26, 2024

References

Jenkins Security Advisory 2023-09-06 www.jenkins.io
www.openwall.com www.openwall.com

Track this CVE