CVE-2023-35148

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-351496.5A missing permission check in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers with Overall/Read permissiCVE-2023-35154.4Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4.CVE-2023-351508.0XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.40m-2 and priCVE-2023-351517.5XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can CVE-2023-351528.8XWiki Platform is a generic wiki platform. Starting in version 12.9-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.1, any logged in userCVE-2023-351535.4XWiki Platform is a generic wiki platform. Starting in version 5.4.4 and prior to versions 14.4.8, 14.10.4, and 15.0, a stored cross-site scCVE-2023-351546.5Knowage is an open source analytics and business intelligence suite. Starting in version 6.0.0 and prior to version 8.1.8, an attacker can rCVE-2023-351556.1XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL withCVE-2023-351566.1XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL withCVE-2023-351574.8XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to perform an XSS by CVE-2023-351586.1XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL withCVE-2023-351596.1XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with
CVE-2023-35148: Medium severity, CVSS 6.5 | Vulnix