Vulnerability Details CVE-2023-30525
A cross-site request forgery (CSRF) vulnerability in Jenkins Report Portal Plugin 0.5 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified bearer token authentication.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.5%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2023-30525
-
cpe:2.3:a:jenkins:report_portal:0.2
-
cpe:2.3:a:jenkins:report_portal:0.3
-
cpe:2.3:a:jenkins:report_portal:0.4
-
cpe:2.3:a:jenkins:report_portal:0.5