Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2023-35141 - Vulnerability Database
Jenkins

Jenkins Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2023-35141

High
Reference: CVE-2023-35141
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-35141
Title: Jenkins Cross-Site Request Forgery (CSRF) Vulnerability
Overview:

In Jenkins 2.399 and earlier LTS 2.387.3 and earlier POST requests are sent in order to load the list of context actions. If part of the URL includes insufficiently escaped user-provided values a victim may be tricked into sending a POST request to an unexpected endpoint by opening a context menu.