Vulnerability Details CVE-2023-39153
A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Authentication Plugin 1.17.1 and earlier allows attackers to trick users into logging in to the attacker's account.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.7%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2023-39153
-
cpe:2.3:a:jenkins:gitlab_authentication:0.1
-
cpe:2.3:a:jenkins:gitlab_authentication:0.10
-
cpe:2.3:a:jenkins:gitlab_authentication:0.11
-
cpe:2.3:a:jenkins:gitlab_authentication:0.12
-
cpe:2.3:a:jenkins:gitlab_authentication:0.13
-
cpe:2.3:a:jenkins:gitlab_authentication:0.13.1
-
cpe:2.3:a:jenkins:gitlab_authentication:0.14
-
cpe:2.3:a:jenkins:gitlab_authentication:0.15
-
cpe:2.3:a:jenkins:gitlab_authentication:0.16
-
cpe:2.3:a:jenkins:gitlab_authentication:0.17
-
cpe:2.3:a:jenkins:gitlab_authentication:0.18
-
cpe:2.3:a:jenkins:gitlab_authentication:0.19
-
cpe:2.3:a:jenkins:gitlab_authentication:0.2
-
cpe:2.3:a:jenkins:gitlab_authentication:0.20
-
cpe:2.3:a:jenkins:gitlab_authentication:0.21
-
cpe:2.3:a:jenkins:gitlab_authentication:0.21.1
-
cpe:2.3:a:jenkins:gitlab_authentication:0.21.2
-
cpe:2.3:a:jenkins:gitlab_authentication:0.22
-
cpe:2.3:a:jenkins:gitlab_authentication:0.22.1
-
cpe:2.3:a:jenkins:gitlab_authentication:0.22.2
-
cpe:2.3:a:jenkins:gitlab_authentication:0.22.3
-
cpe:2.3:a:jenkins:gitlab_authentication:0.23
-
cpe:2.3:a:jenkins:gitlab_authentication:0.24
-
cpe:2.3:a:jenkins:gitlab_authentication:0.25
-
cpe:2.3:a:jenkins:gitlab_authentication:0.26
-
cpe:2.3:a:jenkins:gitlab_authentication:0.27
-
cpe:2.3:a:jenkins:gitlab_authentication:0.28
-
cpe:2.3:a:jenkins:gitlab_authentication:0.28.1
-
cpe:2.3:a:jenkins:gitlab_authentication:0.29
-
cpe:2.3:a:jenkins:gitlab_authentication:0.3
-
cpe:2.3:a:jenkins:gitlab_authentication:0.30
-
cpe:2.3:a:jenkins:gitlab_authentication:0.31
-
cpe:2.3:a:jenkins:gitlab_authentication:0.32
-
cpe:2.3:a:jenkins:gitlab_authentication:0.33
-
cpe:2.3:a:jenkins:gitlab_authentication:0.4
-
cpe:2.3:a:jenkins:gitlab_authentication:0.5
-
cpe:2.3:a:jenkins:gitlab_authentication:0.6
-
cpe:2.3:a:jenkins:gitlab_authentication:0.7
-
cpe:2.3:a:jenkins:gitlab_authentication:0.8
-
cpe:2.3:a:jenkins:gitlab_authentication:0.8.1
-
cpe:2.3:a:jenkins:gitlab_authentication:0.9
-
cpe:2.3:a:jenkins:gitlab_authentication:1.0.0
-
cpe:2.3:a:jenkins:gitlab_authentication:1.0.1
-
cpe:2.3:a:jenkins:gitlab_authentication:1.0.2
-
cpe:2.3:a:jenkins:gitlab_authentication:1.0.3
-
cpe:2.3:a:jenkins:gitlab_authentication:1.0.4
-
cpe:2.3:a:jenkins:gitlab_authentication:1.0.5
-
cpe:2.3:a:jenkins:gitlab_authentication:1.0.6
-
cpe:2.3:a:jenkins:gitlab_authentication:1.0.7
-
cpe:2.3:a:jenkins:gitlab_authentication:1.0.8
-
cpe:2.3:a:jenkins:gitlab_authentication:1.0.9
-
cpe:2.3:a:jenkins:gitlab_authentication:1.1
-
cpe:2.3:a:jenkins:gitlab_authentication:1.10
-
cpe:2.3:a:jenkins:gitlab_authentication:1.11
-
cpe:2.3:a:jenkins:gitlab_authentication:1.12
-
cpe:2.3:a:jenkins:gitlab_authentication:1.13
-
cpe:2.3:a:jenkins:gitlab_authentication:1.2
-
cpe:2.3:a:jenkins:gitlab_authentication:1.3
-
cpe:2.3:a:jenkins:gitlab_authentication:1.4
-
cpe:2.3:a:jenkins:gitlab_authentication:1.5
-
cpe:2.3:a:jenkins:gitlab_authentication:1.6
-
cpe:2.3:a:jenkins:gitlab_authentication:1.7
-
cpe:2.3:a:jenkins:gitlab_authentication:1.8
-
cpe:2.3:a:jenkins:gitlab_authentication:1.9