netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-9jwh-qvg7-gr59
GHSA-m6q8-mwf6-6mmc
This commit is contained in:
advisory-database[bot]
2023-10-27 23:51:21 +00:00
parent c33c3270f6
commit db82e8fd83
2 changed files with 12 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/01/GHSA-9jwh-qvg7-gr59/GHSA-9jwh-qvg7-gr59.json
+6 -3
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9jwh-qvg7-gr59",
"modified": "2023-01-27T01:26:59Z",
"modified": "2023-10-27T23:49:54Z",
"published": "2023-01-26T21:30:18Z",
"aliases": [
"CVE-2023-24432"
@@ -9,7 +9,10 @@
"summary": "CSRF vulnerability in Jenkins Orka Plugin allow capturing credentials",
"details": "A cross-site request forgery (CSRF) vulnerability in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
@@ -46,7 +49,7 @@
"cwe_ids": [
"CWE-352"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2023-01-27T01:26:59Z",
"nvd_published_at": "2023-01-26T21:18:00Z"
advisories/github-reviewed/2023/01/GHSA-m6q8-mwf6-6mmc/GHSA-m6q8-mwf6-6mmc.json
+6 -3
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m6q8-mwf6-6mmc",
"modified": "2023-01-27T01:18:39Z",
"modified": "2023-10-27T23:50:21Z",
"published": "2023-01-26T21:30:18Z",
"aliases": [
"CVE-2023-24434"
@@ -9,7 +9,10 @@
"summary": "CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin",
"details": "A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
@@ -46,7 +49,7 @@
"cwe_ids": [
"CWE-352"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2023-01-27T01:18:39Z",
"nvd_published_at": "2023-01-26T21:18:00Z"