GHSA-997j-37h7-mhg9, CVE-2023-41942
maven/org.jenkins-ci.plugins/aws-codecommit-trigger
Cross-Site Request Forgery (CSRF)
A cross-site request forgery (CSRF) vulnerability in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers to clear the SQS queue.
All versions up to 3.0.12
Unfortunately, there is no solution available yet.
2024-01-31
source |