deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-23612
Published: 2023-01-26
Description: OpenSearch is an open source distributed and RESTful search engine. OpenSearch uses JWTs to store role claims obtained from the Identity Provider (IdP) when the authentication backend is SAML or OpenID Connect. There is an issue in how those claims are processed from the JWTs where the leading and trailing whitespace is trimmed, allowing users to potentially claim roles they are not assigned to if any role matches the whitespace-stripped version of the roles they are a member of. This issue is only present for authenticated users, and it requires either the existence of roles that match, not considering leading/trailing whitespace, or the ability for users to create said matching roles. In addition, the Identity Provider must allow leading and trailing spaces in role names. OpenSearch 1.0.0-1.3.7 and 2.0.0-2.4.1 are affected. Users are advised to upgrade to OpenSearch 1.3.8 or 2.5.0. There are no known workarounds for this issue.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://github.com/opensearch-project/OpenSearch/releases/tag/2.5.0; https://github.com/opensearch-project/security/security/advisories/GHSA-864v-6qj7-62qj; https://github.com/opensearch-project/OpenSearch/releases/tag/2.5.0
CVE: CVE-2023-23613
Published: 2023-01-26
Description: OpenSearch is an open source distributed and RESTful search engine. In affected versions there is an issue in the implementation of field-level security (FLS) and field masking where rules written to explicitly exclude fields are not correctly applied for certain queries that rely on their auto-generated .keyword fields. This issue is only present for authenticated users with read access to the indexes containing the restricted fields. This may expose data which may otherwise not be accessible to the user. OpenSearch 1.0.0-1.3.7 and 2.0.0-2.4.1 are affected. Users are advised to upgrade to OpenSearch 1.3.8 or 2.5.0. Users unable to upgrade may write explicit exclusion rules as a workaround. Policies authored in this way are not subject to this issue.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://github.com/opensearch-project/OpenSearch/releases/tag/2.5.0; https://github.com/opensearch-project/security/security/advisories/GHSA-v3cg-7r9h-r2g6; https://github.com/opensearch-project/OpenSearch/releases/tag/2.5.0
CVE: CVE-2023-23614
Published: 2023-01-26
Description: Pi-hole®'s Web interface (based off of AdminLTE) provides a central location to manage your Pi-hole. Versions 4.0 and above, prior to 5.18.3 are vulnerable to Insufficient Session Expiration. Improper use of admin WEBPASSWORD hash as "Remember me for 7 days" cookie value makes it possible for an attacker to "pass the hash" to login or reuse a theoretically expired "remember me" cookie. It also exposes the hash over the network and stores it unnecessarily in the browser. The cookie itself is set to expire after 7 days but its value will remain valid as long as the admin password doesn't change. If a cookie is leaked or compromised it could be used forever as long as the admin password is not changed. An attacker that obtained the password hash via an other attack vector (for example a path traversal vulnerability) could use it to login as the admin by setting the hash as the cookie value without the need to crack it to obtain the admin password (pass the hash). The hash is exposed over the network and in the browser where the cookie is transmitted and stored. This issue is patched in version 5.18.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-613, CWE-836, CWE-613
References: https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-33w4-xf7m-f82m; https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-33w4-xf7m-f82m
CVE: CVE-2023-23619
Published: 2023-01-26
Description: Modelina is a library for generating data models based on inputs such as AsyncAPI, OpenAPI, or JSON Schema documents. Versions prior to 1.0.0 are vulnerable to Code injection. This issue affects anyone who is using the default presets and/or does not handle the functionality themself. This issue has been partially mitigated in version 1.0.0, with the maintainer's GitHub Security Advisory (GHSA) noting "It is impossible to fully guard against this, because users have access to the original raw information. However, as of version 1, if you only access the constrained models, you will not encounter this issue. Further similar situations are NOT seen as a security issue, but intended behavior." The suggested workaround from the maintainers is "Fully custom presets that change the entire rendering process which can then escape the user input."
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://github.com/asyncapi/modelina/security/advisories/GHSA-4jg2-84c2-pj95; https://github.com/asyncapi/modelina/security/advisories/GHSA-4jg2-84c2-pj95
CVE: CVE-2023-23949
Published: 2023-01-26
Description: An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-779
References: https://support.broadcom.com/external/content/SecurityAdvisories/0/21174; https://support.broadcom.com/external/content/SecurityAdvisories/0/21174
CVE: CVE-2023-23950
Published: 2023-01-26
Description: User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.broadcom.com/external/content/SecurityAdvisories/0/21174; https://support.broadcom.com/external/content/SecurityAdvisories/0/21174
CVE: CVE-2023-23951
Published: 2023-01-26
Description: Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.broadcom.com/external/content/SecurityAdvisories/0/21174; https://support.broadcom.com/external/content/SecurityAdvisories/0/21174
CVE: CVE-2023-24022
Published: 2023-01-26
Description: Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 have hardcoded credentials that are easily discovered and can be used by remote attackers to authenticate via ssh. (The credentials are stored in the firmware, encrypted by the crypt function.) 

CVSS Score: 10.0 (CRITICAL)
CWE: CWE-284, CWE-798
References: https://baicells.zendesk.com/hc/en-us/articles/[PII_REDACTED]780-2023-1-17-Hard-Coded-Credential-Crypt-Vulnerability; https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMG; https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdf
CVE: CVE-2023-24054
Published: 2023-01-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2023-24057
Published: 2023-01-26
Description: HL7 (Health Level 7) FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive (for a prepackaged terminology cache, NPM package, or comparison archive).
CVSS Score: 8.1 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/HL7/fhir-ig-publisher/security/advisories/GHSA-xr8x-pxm6-prjg; https://github.com/HL7/fhir-ig-publisher/security/advisories/GHSA-xr8x-pxm6-prjg
CVE: CVE-2023-24164
Published: 2023-01-26
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC18/4/4.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC18/4/4.md
CVE: CVE-2023-24165
Published: 2023-01-26
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC18/7/7.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC18/7/7.md
CVE: CVE-2023-24166
Published: 2023-01-26
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC18/2/2.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC18/2/2.md
CVE: CVE-2023-24167
Published: 2023-01-26
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/add_white_node.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC18/1/1.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC18/1/1.md
CVE: CVE-2023-24169
Published: 2023-01-26
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_0007343c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-120
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC18/6/6.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC18/6/6.md
CVE: CVE-2023-24170
Published: 2023-01-26
Description: Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/fromSetWirelessRepeat.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC18/3/3.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC18/3/3.md
CVE: CVE-2023-24422
Published: 2023-01-26
Description: A sandbox bypass vulnerability involving map constructors in Jenkins Script Security Plugin 1228.vd93135a_2fb_25 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016
CVE: CVE-2023-24423
Published: 2023-01-26
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plugin 2.38.0 and earlier allows attackers to rebuild previous builds triggered by Gerrit.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2137; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2137
CVE: CVE-2023-24424
Published: 2023-01-26
Description: Jenkins OpenId Connect Authentication Plugin 2.4 and earlier does not invalidate the previous session on login.
CVSS Score: 8.8 (HIGH)
CWE: CWE-384, CWE-384
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2978; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2978
CVE: CVE-2023-24425
Published: 2023-01-26
Description: Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes credentials they are not entitled to.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3022; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3022
CVE: CVE-2023-24426
Published: 2023-01-26
Description: Jenkins Azure AD Plugin 303.va_91ef20ee49f and earlier does not invalidate the previous session on login.
CVSS Score: 8.8 (HIGH)
CWE: CWE-613, CWE-613
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2980; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2980
CVE: CVE-2023-24427
Published: 2023-01-26
Description: Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384, CWE-384
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2982; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2982
CVE: CVE-2023-24428
Published: 2023-01-26
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2981; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2981
CVE: CVE-2023-24429
Published: 2023-01-26
Description: Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses external entities for extraction of secrets from the Jenkins controller or server-side request forgery.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-611
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2973%20%281%29; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2973%20%281%29
CVE: CVE-2023-24430
Published: 2023-01-26
Description: Jenkins Semantic Versioning Plugin 1.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-611
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2973%20%282%29; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2973%20%282%29
CVE: CVE-2023-24431
Published: 2023-01-26
Description: A missing permission check in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20%281%29; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20%281%29
CVE: CVE-2023-24432
Published: 2023-01-26
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20%282%29; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20%282%29
CVE: CVE-2023-24433
Published: 2023-01-26
Description: Missing permission checks in Jenkins Orka by MacStadium Plugin 1.31 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20%282%29; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2772%20%282%29
CVE: CVE-2023-24434
Published: 2023-01-26
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20%282%29; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20%282%29
CVE: CVE-2023-24435
Published: 2023-01-26
Description: A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20%282%29; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20%282%29
CVE: CVE-2023-24436
Published: 2023-01-26
Description: A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20%281%29; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2789%20%281%29
CVE: CVE-2023-24437
Published: 2023-01-26
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2786; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2786
CVE: CVE-2023-24438
Published: 2023-01-26
Description: A missing permission check in Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2786; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2786
CVE: CVE-2023-24439
Published: 2023-01-26
Description: Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier stores the private keys unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774
CVE: CVE-2023-24440
Published: 2023-01-26
Description: Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier transmits the private key in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774
CVE: CVE-2023-24441
Published: 2023-01-26
Description: Jenkins MSTest Plugin 1.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-611
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2292; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2292
CVE: CVE-2023-24442
Published: 2023-01-26
Description: Jenkins GitHub Pull Request Coverage Status Plugin 2.2.0 and earlier stores the GitHub Personal Access Token, Sonar access token and Sonar password unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2767; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2767
CVE: CVE-2023-24443
Published: 2023-01-26
Description: Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-611
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2741; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2741
CVE: CVE-2023-24444
Published: 2023-01-26
Description: Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-404, CWE-404
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2996; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2996
CVE: CVE-2023-24445
Published: 2023-01-26
Description: Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2997; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2997
CVE: CVE-2023-24446
Published: 2023-01-26
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and earlier allows attackers to trick users into logging in to the attacker's account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2995; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2995
CVE: CVE-2023-24447
Published: 2023-01-26
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers to connect to an attacker-specified AMQP(S) URL using attacker-specified username and password.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2778; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2778
CVE: CVE-2023-24448
Published: 2023-01-26
Description: A missing permission check in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified AMQP(S) URL using attacker-specified username and password.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2778; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2778
CVE: CVE-2023-24449
Published: 2023-01-26
Description: Jenkins PWauth Security Realm Plugin 0.4 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2985; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2985
CVE: CVE-2023-24450
Published: 2023-01-26
Description: Jenkins view-cloner Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2787; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2787
CVE: CVE-2023-24451
Published: 2023-01-26
Description: A missing permission check in Jenkins Cisco Spark Notifier Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2803; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2803
CVE: CVE-2023-24452
Published: 2023-01-26
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified username and password.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2800; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2800
CVE: CVE-2023-24453
Published: 2023-01-26
Description: A missing check in Jenkins TestQuality Updater Plugin 1.3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2800; https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2800