← CVE Intelligence

CVE-2023-2631

CSRF vulnerability and missing permission checks in Code Dx Plugin PUBLISHED

Description (CNA)

A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

Affected (CNA)

Vendor / productVersions
Jenkins / Jenkins Code Dx Pluginaffected 0 through 3.1.0

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.