Cross-Site Request Forgery in Jenkins WSO2 Oauth Plugin

CVE-2023-33006

What is CVE-2023-33006?

The Jenkins WSO2 Oauth Plugin, version 1.0 and earlier, is susceptible to a cross-site request forgery (CSRF) vulnerability. This weakness allows attackers to manipulate authenticated users into unintentionally logging into an account they control, compromising user credentials and sessions. Organizations using affected versions are advised to apply the latest security patches to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References