Not rated

CVE-2023-50767 Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read…

Description

Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Nexus Platform Plugin 3.18	earliest → 3.18.0-03	No fix stated

The 4 CVEs of Jenkins Nexus Platform Plugin →

CVE-2023-50769 Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read… Not rated CVE-2023-50768 A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows… 8.8 High CVE-2023-50766 A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows… 8.8 High

Do you use Jenkins Nexus Platform Plugin?

Track this CVE Watch Jenkins Nexus Platform Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-50767

Timeline

Published December 13, 2023
Last modified February 13, 2025

References

Jenkins Security Advisory 2023-12-13 www.jenkins.io
www.openwall.com www.openwall.com

Track this CVE

CVE-2023-50767 Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read…

Description

Affected products and versions

Other CVEs of Jenkins Nexus Platform Plugin