Not rated
CVE-2023-50778 A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers…
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified token.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins PaaSLane Estimate Plugin 1.0 | earliest → 1.0.4 | No fix stated |
Other CVEs of Jenkins PaaSLane Estimate Plugin
The 4 CVEs of Jenkins PaaSLane Estimate Plugin →
CVE-2023-50779
Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read…
Not rated
CVE-2023-50776
Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml…
Not rated
CVE-2023-50777
Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job…
4.3
Medium