CVE-2023-37958

HighCVSS 8.8

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

37th percentile - higher than 37% of all known CVEs

Summary

The Sumologic Publisher plugin in Jenkins version 2.2.1 and earlier contains a cross-site request forgery (CSRF) vulnerability that allows attackers to connect to an attacker-specified URL.

Risk Assessment

This vulnerability could lead to unauthorized access to organizational resources, posing a risk of data leakage or system takeover.

Recommendation

It is recommended to update the Sumologic Publisher plugin to the latest version to mitigate the risk associated with this vulnerability.

Other vulnerabilities in Jenkins Sumologic Publisher Plugin

CVE-2023-37959Medium
A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

Original NVD description (English source)

A cross-site request forgery (CSRF) vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an attacker-specified URL.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS