~ / search / GHSA-9wrr-4r9v-26xc

GHSA-9wrr-4r9v-26xc

CSRF vulnerability in Jenkins Keycloak Authentication Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-24457

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:keycloak < 2.3.1 2.3.1

Details

As written in the advisory (Markdown source, shown as plain text).

A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account.

References

External links from the advisory. They lead to third-party sites.