CVE-2023-35148

Summary

CVE-2023-35148 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Jenkins Digital.ai App Management Publisher Plugin version 2.6 and earlier. This issue allows malicious actors to manipulate unintended actions on the affected Jenkins instance, resulting in the unintentional transfer of credentials to an attacker-specified URL. Successful exploitation of this vulnerability could lead to unauthorized access to Jenkins instances and potentially compromise sensitive information. Users are recommended to upgrade to the latest version of the plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.