CVE-2023-24446

Maven/org.jenkins-ci.plugins:openid CVE-2023-24446: high 8.8

Cross-site request forgery vulnerability in Jenkins OpenID Plugin

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-96jv-c7m6-q43g
• https://nvd.nist.gov/vuln/detail/CVE-2023-24446
• https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2995

CVE-2023-24446 · published 2023-01-26T21:30:18Z · modified 2023-11-08T04:11:46.015457Z · JSON