GHSA-997j-37h7-mhg9

ghsaUSosv

CSRF vulnerability in Jenkins AWS CodeCommit Trigger Plugin

view advisory published 2023-09-06Licence: CC-BY-4.0

A cross-site request forgery (CSRF) vulnerability in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers to clear the SQS queue.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-41942US	medium4.3	0.33% (26th)	—	2023-09-06
A cross-site request forgery (CSRF) vulnerability in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers to clear the SQS queue.

references

External citations — patches, advisories, analysis.

http://www.openwall.com/lists/oss-security/2023/09/06/9WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-41942ADVISORY
https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3101%20(2)WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan