← Database

CVE-2023-24446

HIGH CVSS: 8.8 Published: 2023-01-26 Modified: 2026-06-17

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and earlier allows attackers to trick users into logging in to the attacker's account.

Affected Platforms

Jenkins Openid

Weakness Type

CWE-352, CWE-352

References