CSRF Vulnerability in Jenkins SAML Single Sign On Plugin Allows Unauthorized Email Sending

CSRF Vulnerability in Jenkins SAML Single Sign On Plugin Allows Unauthorized Email Sending

CVE-2023-32995 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers to send an HTTP POST request with JSON body containing attacker-specified content, to miniOrange's API for sending emails.

Learn more about our Api Penetration Testing.