CVE-2023-40337

MediumCVSS 4.3

Published: 16/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

The Jenkins Folders Plugin version 6.846.v23698686f0f6 and earlier contains a cross-site request forgery (CSRF) vulnerability that allows attackers to copy a view inside a folder.

Risk Assessment

This vulnerability may lead to unauthorized access to data and manipulation of views within the Jenkins system, posing a threat to the integrity and security of the application.

Recommendation

It is recommended to update the Jenkins Folders Plugin to the latest version to mitigate this vulnerability and implement additional security measures against CSRF attacks.

Original NVD description (English source)

A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy a view inside a folder.