← CVE Intelligence

CVE-2023-24457

Jenkins Project / Jenkins Keycloak Authentication Plugin PUBLISHED

Description (CNA)

A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account.

Affected (CNA)

Vendor / productVersions
Jenkins Project / Jenkins Keycloak Authentication Pluginaffected unspecified through 2.3.0; unknown next of 2.3.0 before unspecified

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.