CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-24446

A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and earlier allows attackers to trick users into logging in to the attacker's account.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.2%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2023-24446

Jenkins » Openid » Version: N/A

cpe:2.3:a:jenkins:openid:-
Jenkins » Openid » Version: 1.0

cpe:2.3:a:jenkins:openid:1.0
Jenkins » Openid » Version: 1.1

cpe:2.3:a:jenkins:openid:1.1
Jenkins » Openid » Version: 1.2

cpe:2.3:a:jenkins:openid:1.2
Jenkins » Openid » Version: 1.3

cpe:2.3:a:jenkins:openid:1.3
Jenkins » Openid » Version: 1.4

cpe:2.3:a:jenkins:openid:1.4
Jenkins » Openid » Version: 1.5

cpe:2.3:a:jenkins:openid:1.5
Jenkins » Openid » Version: 1.6

cpe:2.3:a:jenkins:openid:1.6
Jenkins » Openid » Version: 1.7

cpe:2.3:a:jenkins:openid:1.7
Jenkins » Openid » Version: 1.8

cpe:2.3:a:jenkins:openid:1.8
Jenkins » Openid » Version: 2.0

cpe:2.3:a:jenkins:openid:2.0
Jenkins » Openid » Version: 2.1

cpe:2.3:a:jenkins:openid:2.1
Jenkins » Openid » Version: 2.1.1

cpe:2.3:a:jenkins:openid:2.1.1
Jenkins » Openid » Version: 2.2

cpe:2.3:a:jenkins:openid:2.2
Jenkins » Openid » Version: 2.3

cpe:2.3:a:jenkins:openid:2.3
Jenkins » Openid » Version: 2.4

cpe:2.3:a:jenkins:openid:2.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-24446

Products

Pricing

Contact Us