Maven/org.jenkinsci.plugins.spoonscript:spoonscript CVE-2023-30532: medium 6.5, EPSS 0.57%

Lack of authentication mechanism in Jenkins TurboScript Plugin webhook

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-7gqc-q9mc-6348
• https://nvd.nist.gov/vuln/detail/CVE-2023-30532
• https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2851
• http://www.openwall.com/lists/oss-security/2023/04/13/3

CVE-2023-30532 · published 2023-04-12T18:30:35Z · modified 2024-02-16T08:15:53.556636Z · JSON