CVE-2023-40337
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
The Jenkins Folders Plugin version 6.846.v23698686f0f6 and earlier contains a cross-site request forgery (CSRF) vulnerability that allows attackers to copy a view inside a folder.
Risk Assessment
This vulnerability may lead to unauthorized access to data and manipulation of views within the Jenkins system, posing a threat to the integrity and security of the application.
Recommendation
It is recommended to update the Jenkins Folders Plugin to the latest version to mitigate this vulnerability and implement additional security measures against CSRF attacks.
Other vulnerabilities in Jenkins Folders Plugin
See all- CVE-2023-40338Medium
Jenkins Folders Plugin version 6.846.v23698686f0f6 and earlier displays an error message that includes an absolute path of a log file when attempting to access the Scan Organization Folder Log if no logs are available.
- CVE-2023-40336High
The Jenkins Folders Plugin version 6.846.v23698686f0f6 and earlier contains a cross-site request forgery (CSRF) vulnerability that allows attackers to copy folders.
Original NVD description (English source)
A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy a view inside a folder.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS