CVE-2023-24423: CSRF
A cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plugin 2.38.0 and earlier allows attackers to rebuild previous builds triggered by Gerrit.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-24423?
CVE-2023-24423 is classified as a medium severity vulnerability due to its potential impact on Jenkins Gerrit Trigger Plugin's security.
How do I fix CVE-2023-24423?
To remediate CVE-2023-24423, upgrade the Jenkins Gerrit Trigger Plugin to version 2.38.1 or later.
What systems are affected by CVE-2023-24423?
CVE-2023-24423 affects Jenkins Gerrit Trigger Plugin versions 2.38.0 and earlier.
What kind of attack does CVE-2023-24423 enable?
CVE-2023-24423 allows attackers to perform a cross-site request forgery (CSRF) attack, enabling them to rebuild previous builds triggered by Gerrit.
Is user interaction required to exploit CVE-2023-24423?
Yes, exploitation of CVE-2023-24423 typically requires user interaction, as it relies on the victim's browser to send unauthorized requests.