Maven/org.jenkins-ci.plugins:ldap CVE-2023-32978: medium 4.3, EPSS 0.30%
Jenkins LDAP Plugin vulnerable to Cross-Site Request Forgery
Action: Upgrade org.jenkins-ci.plugins:ldap to 676.vfa or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 676.vfa | - |
Fixed versions
| 676.vfa |
Sources
- osv: GHSA-c9qp-6556-jwwp
- https://nvd.nist.gov/vuln/detail/CVE-2023-32978
- https://github.com/jenkinsci/ldap-plugin/commit/fa64cf6bb002f1b60a45fcd308d45b5a1047e687
- https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3046
CVE-2023-32978 · published · modified · JSON