CVE-2023-39153

Summary

CVE-2023-39153 is a cross-site request forgery (CSRF) vulnerability affecting the Jenkins GitLab Authentication Plugin version 1.17.1 and earlier. This issue permits attackers to manipulate users into logging into their own malicious accounts, potentially resulting in unauthorized access to Jenkins instances. Successful exploitation relies on users unsuspectingly clicking on a maliciously crafted link, making it crucial for users to apply the available patch or upgrade their plugin to a secure version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.