← Database

CVE-2023-24457

MEDIUM CVSS: 6.5 Published: 2023-01-26 Modified: 2026-06-17

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Keycloak Authentication Plugin 2.3.0 and earlier allows attackers to trick users into logging in to the attacker's account.

Affected Platforms

Jenkins Keycloak Authentication

Weakness Type

CWE-352, CWE-352

References