CVE-2023-4301

Summary

CVE-2023-4301 is a cross-site request forgery (CSRF) vulnerability affecting Jenkins Fortify Plugin version 22.1.38 and earlier. Attackers can exploit this issue to force a user to connect to an attacker-specified URL using their Jenkins-stored credentials. The vulnerability arises due to insufficient input validation and lack of CSRF tokens in certain plugin functions, leaving Jenkins vulnerable to credential theft. To mitigate the risk, it is recommended to upgrade to the latest version of the Jenkins Fortify Plugin or implement CSRF protection mechanisms.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.