Cross-Site Request Forgery in Jenkins GitLab Branch Source Plugin

CVE-2024-23902

What is CVE-2024-23902?

A security flaw has been identified in the GitLab Branch Source Plugin for Jenkins, where a cross-site request forgery (CSRF) can allow attackers to redirect users to a malicious URL of their choice. This vulnerability opens the door for unauthorized actions under the context of a victim user, potentially leading to malicious exploitation. Users are urged to assess their systems for the affected versions and apply the necessary security patches as recommended by the Jenkins security advisory.

References