CVE-2023-41946

A cross-site request forgery (CSRF) vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using…

published September 6, 2023

CVSS
—
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

A cross-site request forgery (CSRF) vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from Frugal Testing, if a valid credential corresponds to the attacker-specified username.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00315 · 23.2th percentile
Published
2023-09-06T12:09Z
EPSS history
Timeline
  • 06 SEP 12:09Z
    A cross-site request forgery (CSRF) vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using…
    cvelistv5