CVE-2023-40341

Summary

CVE-2023-40341 is a cross-site request forgery (CSRF) vulnerability affecting the Jenkins Blue Ocean Plugin version 1.27.5 and earlier. This issue enables attackers to manipulate user actions by tricking them into executing a malicious request. Specifically, attackers can cause users to connect to an attacker-specified URL, potentially resulting in the theft of GitHub credentials associated with an attacker-specified job. This vulnerability poses a significant risk as it can lead to unauthorized access to sensitive information, highlighting the importance of updating affected plugins to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.