~ / search / GHSA-95jq-24cr-pgrq

GHSA-95jq-24cr-pgrq

Cross-site request forgery in Jenkins Gerrit Trigger Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-24423

Packages

EcosystemPackageAffectedFixed in
Maven com.sonyericsson.hudson.plugins.gerrit:gerrit-trigger < 2.38.1 2.38.1

Details

As written in the advisory (Markdown source, shown as plain text).

A cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plugin 2.38.0 and earlier allows attackers to rebuild previous builds triggered by Gerrit.

References

External links from the advisory. They lead to third-party sites.