CVE-2023-37957

Summary

CVE-2023-37957 is a cross-site request forgery (CSRF) vulnerability affecting the Jenkins Pipeline restFul API Plugin version 0.11 and earlier. An attacker can exploit this flaw to force a Jenkins user into making unintended requests, resulting in the generation of a new JCLI token which the attacker can then capture and misuse. This can lead to unauthorized access to Jenkins pipeline operations and potential data breaches. Users are advised to update to the latest plugin version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.