CVE-2023-24446

Source

https://nvd.nist.gov/vuln/detail/CVE-2023-24446

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-24446.json

Aliases

• GHSA-96jv-c7m6-q43g

Published

2023-01-26T21:18:18Z

Modified

2023-11-29T09:53:34.841344Z

Details

A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and earlier allows attackers to trick users into logging in to the attacker's account.

References

• https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2995