CVE-2023-37954

MediumCVSS 4.3

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

20th percentile - higher than 20% of all known CVEs

Summary

The Rebuilder plugin in Jenkins version 320.v5a_0933a_e7d61 and earlier contains a cross-site request forgery (CSRF) vulnerability that allows attackers to rebuild a previous build.

Risk Assessment

This vulnerability could lead to unauthorized rebuilding of projects, potentially impacting the integrity and security of CI/CD processes within the organization.

Recommendation

It is recommended to update the Rebuilder plugin to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

A cross-site request forgery (CSRF) vulnerability in Jenkins Rebuilder Plugin 320.v5a_0933a_e7d61 and earlier allows attackers to rebuild a previous build.