GitHub Advisoryadvisory · Maven

GHSA-wh3h-j8wp-6p42 CSRF vulnerability in Jenkins Azure Service Fabric Plugin

MEDIUM Published 2025-01-22 Modified 2025-01-22 Official page ↗
Aliases
CVE-2025-24402
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:service-fabric
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-352
Reviewed
2025-01-22

Affected packages

• Maven org.jenkins-ci.plugins:service-fabric: <= 1.6 (no fix yet)

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs obtained through another method.

Related

Alias · CVE (1)

  • CVE-2025-24402 A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a… vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References