CVE-2023-32998

Name of the Vulnerable Software and Affected Versions Jenkins AppSpider Plugin versions 1.0.15 and earlier

Description A cross-site request forgery (CSRF) vulnerability allows attackers to connect to an attacker-specified URL and send an HTTP POST request with a JSON payload consisting of attacker-specified credentials.

Recommendations For Jenkins AppSpider Plugin versions 1.0.15 and earlier, consider disabling the plugin until a patch is available to prevent exploitation of the CSRF vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.