CVE-2023-39156

MediumCVSS 5.3

Published: 26/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

The Bazaar Plugin in Jenkins versions 1.22 and earlier has a cross-site request forgery (CSRF) vulnerability that allows attackers to delete previously created Bazaar SCM tags.

Risk Assessment

Attackers can exploit this vulnerability to unauthorized deletion of important tags, potentially leading to data loss and disruption of system operations.

Recommendation

It is recommended to update the Bazaar Plugin to the latest version to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

A cross-site request forgery (CSRF) vulnerability in Jenkins Bazaar Plugin 1.22 and earlier allows attackers to delete previously created Bazaar SCM tags.