Skip to content
Sign in
8.8 High

CVE-2023-50766 A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to send an HTTP request to an attacker-specified URL and parse the response as XML.

Affected products and versions

Product Affected versions Fixed in
Jenkins Nexus Platform Plugin 3.18 earliest → 3.18.0-03 No fix stated

Other CVEs of Jenkins Nexus Platform Plugin

The 4 CVEs of Jenkins Nexus Platform Plugin →
CVE-2023-50769 Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read… Not rated CVE-2023-50768 A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows… 8.8 High CVE-2023-50767 Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read… Not rated
Track this CVE