Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Bazaar Plugin 1.22 and earlier allows attackers to delete previously created Bazaar SCM tags.

Remediation

References

http://www.openwall.com/lists/oss-security/2023/07/26/2

https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3095

Related Vulnerabilities

CVE-2020-2183 Vulnerability in maven package org.jenkins-ci.plugins:copyartifact

CVE-2020-28441 Vulnerability in npm package conf-cfg-ini

CVE-2018-1000096 Vulnerability in npm package tiny-json-http

CVE-2022-28220 Vulnerability in maven package org.apache.james.protocols:protocols-api

CVE-2020-11887 Vulnerability in npm package svg2png

Severity

Medium

Classification

CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Mailing List Third Party Advisory Vendor Advisory