← Database

CVE-2023-24423

MEDIUM CVSS: 6.5 Published: 2023-01-26 Modified: 2026-06-17

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Gerrit Trigger Plugin 2.38.0 and earlier allows attackers to rebuild previous builds triggered by Gerrit.

Affected Platforms

Jenkins Gerrit Trigger

Weakness Type

CWE-352, CWE-352

References