CVE-2023-40336
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
The Jenkins Folders Plugin version 6.846.v23698686f0f6 and earlier contains a cross-site request forgery (CSRF) vulnerability that allows attackers to copy folders.
Risk Assessment
Attackers can exploit this vulnerability to unauthorized copy folders, potentially leading to data exposure or system integrity breaches.
Recommendation
It is recommended to update the Jenkins Folders Plugin to the latest version to mitigate this vulnerability.
Other vulnerabilities in Jenkins Folders Plugin
See all- CVE-2023-40338Medium
Jenkins Folders Plugin version 6.846.v23698686f0f6 and earlier displays an error message that includes an absolute path of a log file when attempting to access the Scan Organization Folder Log if no logs are available.
- CVE-2023-40337Medium
The Jenkins Folders Plugin version 6.846.v23698686f0f6 and earlier contains a cross-site request forgery (CSRF) vulnerability that allows attackers to copy a view inside a folder.
Original NVD description (English source)
A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy folders.