Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-50775 EUVD-2023-3298GHSA-v672-5x3h-57qp

Cross-site request forgery vulnerability in Jenkins Deployment Dashboard Plugin

Published Dec 13, 2023 · Updated Feb 13, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Deployment Dashboard Plugin Package: org.jenkins-ci.plugins:ec2-deployment-dashboard Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins Deployment Dashboard Plugin ≤ 1.0.10 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:ec2-deployment-dashboard <= 1.0.10 — GHSA-v672-5x3h-57qp

Advisories 1

References