Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-41938 EUVD-2023-2440GHSA-63vw-rprv-4f8j

CSRF vulnerability in Jenkins Ivy Plugin

Published Sep 6, 2023 · Updated Sep 26, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Ivy Plugin Package: org.jenkins-ci.plugins:ivy Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins Ivy Plugin ≤ 2.5 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:ivy <= 2.5 — GHSA-63vw-rprv-4f8j

Advisories 1

References