Description
A cross-site request forgery (CSRF) vulnerability in Jenkins WSO2 Oauth Plugin 1.0 and earlier allows attackers to trick users into logging in to the attacker's account.
Remediation
References
https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2990
Related Vulnerabilities
CVE-2023-25158 Vulnerability in maven package org.geotools.jdbc:gt-jdbc-mysql
CVE-2016-0709 Vulnerability in maven package org.apache.portals.jetspeed-2:j2-admin
CVE-2013-1921 Vulnerability in maven package org.picketbox:jbosssx
CVE-2020-9491 Vulnerability in maven package org.apache.nifi:nifi-bootstrap
CVE-2022-36884 Vulnerability in maven package org.jenkins-ci.plugins:git