CVE-2023-3414
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
A cross-site request forgery vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information.
Risk Assessment
The organization may be exposed to data leaks, which could lead to serious legal and reputational consequences.
Recommendation
It is recommended to apply version 1.38.1 of the Jenkins plug-in for ServiceNow DevOps on your Jenkins server to address this vulnerability.
Original NVD description (English source)
A cross-site request forgery vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information. To address this issue, apply the 1.38.1 version of the Jenkins plug-in for ServiceNow DevOps on your Jenkins server. No changes are required on your instances of the Now Platform.