CVE-2023-37955

MediumCVSS 6.5

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

The Jenkins Test Results Aggregator Plugin version 1.2.13 and earlier contains a cross-site request forgery (CSRF) vulnerability that allows attackers to connect to an attacker-specified URL using attacker-specified credentials.

Risk Assessment

This vulnerability may lead to unauthorized access to resources, posing a risk of data leakage or system takeover.

Recommendation

It is recommended to update the plugin to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

A cross-site request forgery (CSRF) vulnerability in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.