CVE-2023-39156

A cross-site request forgery (CSRF) vulnerability in Jenkins Bazaar Plugin 1.22 and earlier allows attackers to delete previously created Bazaar SCM tags.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
jenkinsCNA
---
---
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
VendorProductVersion
jenkinsbazaar
𝑥
≤ 1.22
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2023/07/26/2
https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3095
http://www.openwall.com/lists/oss-security/2023/07/26/2
https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3095