CVE-2023-41938

Cross-Site Request Forgery (CSRF) in maven/org.jenkins-ci.plugins/ivy

Identifiers

GHSA-63vw-rprv-4f8j, CVE-2023-41938

Package Slug

maven/org.jenkins-ci.plugins/ivy

Vulnerability

Cross-Site Request Forgery (CSRF)

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules.

Affected Versions

All versions up to 2.5

Solution

Unfortunately, there is no solution available yet.

Last Modified

2024-01-31

source