Cross-Site Request Forgery Vulnerability in Jenkins Orka by MacStadium Plugin

CVE-2023-24432

Summary

The Jenkins Orka by MacStadium Plugin is susceptible to a cross-site request forgery vulnerability, which could allow an attacker to exploit user sessions. By targeting an HTTP server indicated by the attacker and utilizing credentials acquired through other means, this vulnerability poses a significant risk of unauthorized access to sensitive credentials stored in Jenkins. Proper security measures must be put in place to mitigate the potential consequences of such exploitation.

References