CVE-2023-4301

MediumCVSS 4.2

Published: 21/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

The Fortify Plugin in Jenkins version 22.1.38 and earlier contains a cross-site request forgery (CSRF) vulnerability that allows attackers to connect to an attacker-specified URL using credentials IDs obtained through another method.

Risk Assessment

This vulnerability allows for the capture of credentials stored in Jenkins, potentially leading to unauthorized access to the system.

Recommendation

It is recommended to update the Fortify Plugin to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

A cross-site request forgery (CSRF) vulnerability in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.