CVE-2023-35148 (published 2023-06-14T12:53:10.250Z)
A cross-site request forgery (CSRF) vulnerability in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins.
Affected products: Vendor: Jenkins Project
Product: Jenkins Digital.ai App Management Publisher Plugin
Versions: 0