CVE-2024-23902
Assigner: jenkins
Published: 2024-01-24T17:52:26.044Z
State: PUBLISHED
affected: vendor: Jenkins Project
product: Jenkins GitLab Branch Source Plugin
versions: version: 0
versionType: maven
lessThanOrEqual: 684.vea_fa_7c1e2fe3
status: affected
defaultStatus: unaffected
descriptions: value: A cross-site request forgery (CSRF) vulnerability in Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3 and earlier allows attackers to connect to an attacker-specified URL.