CVE-2023-50775

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs.

Affected packages (1)

• Maven/org.jenkins-ci.plugins:ec2-deployment-dashboardfrom 0, <= 1.0.10

CVSS scores

References (4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-50775
• PATCHhttps://github.com/jenkinsci/ec2-deployment-dashboard
• WEBhttps://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3092
• WEBhttp://www.openwall.com/lists/oss-security/2023/12/13/4