Medium · 4.3 CVE-2023-37954 EUVD-2023-1970GHSA-5r5c-7rm4-mp4r

Jenkins Rebuilder Plugin vulnerable to Cross Site Request Forgery

Published Jul 12, 2023 · Updated Nov 6, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Rebuilder Plugin Package: com.sonyericsson.hudson.plugins.rebuild:rebuild Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Rebuilder Plugin 320.v5a_0933a_e7d61 and earlier allows attackers to rebuild a previous build.

Affected products

Vendor	Product	Affected	Fixed
Jenkins Project	Jenkins Rebuilder Plugin	≤ 320.v5a_0933a_e7d61	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	com.sonyericsson.hudson.plugins.rebuild:rebuild	<= 320.v5a	—	GHSA-5r5c-7rm4-mp4r

Advisories 1

WID-SEC-2023-1743 Jenkins Plugins: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 11, 2024

References

Jenkins Security Advisory 2023-07-12 vendor-advisory
http://www.openwall.com/lists/oss-security/2023/07/12/2