CVE-2023-40336

Summary

CVE-2023-40336 is a newly identified cross-site request forgery (CSRF) vulnerability affecting the Jenkins Folders Plugin version 6.846.v23698686f0f6 and earlier. This issue enables attackers to manipulate vulnerable Jenkins installations by deceiving users into executing malicious folder copying actions. The exploitation of this CSRF flaw can lead to unauthorized data modification and potential security breaches within the affected Jenkins environment. Users are strongly advised to update their Jenkins Folders Plugin to a patched version as soon as possible to mitigate the risk of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.