Not rated

CVE-2023-50774 A cross-site request forgery (CSRF) vulnerability in Jenkins HTMLResource Plugin 1.02 and earlier allows attackers to…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins HTMLResource Plugin 1.02 and earlier allows attackers to delete arbitrary files on the Jenkins controller file system.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins HTMLResource Plugin 1.02	earliest → 1.02	No fix stated

Do you use Jenkins HTMLResource Plugin?

Track this CVE Watch Jenkins HTMLResource Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-50774

Timeline

Published December 13, 2023
Last modified February 13, 2025

References

Jenkins Security Advisory 2023-12-13 www.jenkins.io
www.openwall.com www.openwall.com

Track this CVE