{"id":"CVE-2023-32989","details":"A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method.","aliases":["GHSA-26j3-4m55-j6r7"],"modified":"2026-07-09T15:01:09.209488Z","published":"2023-05-16T16:15:11.310Z","references":[{"type":"ADVISORY","url":"https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(2)"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/azure-vm-agents-plugin","events":[{"introduced":"0"},{"last_affected":"8d35f0960a4358a23e304964ad1378f2e4bd3ded"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:jenkins:azure_vm_agents:*:*:*:*:*:jenkins:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"852.v8d35f0960a_43"}]}}],"versions":["852.v8d35f0960a_43","851.v16b_dcb_e85c85","846.v5a_f7e3dce959","845.v35ee7c5570db_","842.v9fedb_4cc1b_e9","825.v470cb_9e7361a_","824.v31b_9c29f67fd","822.v3a18fc3d2de1","816.v27bbb474b2b2","815.vf2f07da070ee","813.v8ae017133e51","810.v0a97a847315a","808.v9d1999587120","806.vae775cde5efa","805.v424cc2981d7a","804.ve77d45cc9464","803.vef83d334600f","802.vbac7a8a5d5e2","801.v37f3eab68cf0","799.va4c741108611","797.v31f530348574","795.vd5903dae1139","794.v8a62ee91dc70","793.vbb935f9be778","789.va0c40e4d0070","783.v58077630847d","782.vb41dc00d85b1","781.v5877a4d99d28","780.v50d067d02f76","779.v5ea1414ec40f","778.va3924310a4eb","777.v276476e1344c","775.v0bbd3d0d016a","774.v0cee503baa25","768.vb8b0d31eef4f","766.vbdb82c53e70a","765.vbb9943c5070c","764.vf22cf908cb69","763.vedbebdfd1222","761.v8d93e0672563","760.ve25700ee68cc","759.v1c1f79435487","azure-vm-agents-1.5.3","azure-vm-agents-1.5.2","azure-vm-agents-1.5.1","azure-vm-agents-1.5.0","azure-vm-agents-1.4.0","azure-vm-agents-1.3.0","azure-vm-agents-1.2.2","azure-vm-agents-1.2.1","azure-vm-agents-1.2.0","azure-vm-agents-1.1.1","azure-vm-agents-1.1.0","azure-vm-agents-1.0.1","azure-vm-agents-1.0.0","v0.9.1-PREVIEW","azure-vm-agents-0.9.0","azure-vm-agents-0.8.1","azure-vm-agents-0.8.0","azure-vm-agents-0.7.5","azure-vm-agents-0.7.4","azure-vm-agents-0.7.3","azure-vm-agents-0.7.2.1","azure-vm-agents-0.7.1","azure-vm-agents-0.7.0","azure-vm-agents-0.6.2","azure-vm-agents-0.6.1","azure-vm-agents-0.6.0","azure-vm-agents-0.5.0","azure-vm-agents-0.4.8","azure-vm-agents-0.4.7.1","azure-vm-agents-0.4.7","azure-vm-agents-0.4.6","azure-vm-agents-0.4.4","azure-vm-agents-0.4.3","azure-vm-agents-0.4.2","azure-vm-agents-0.4.1","azure-vm-agents-0.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-32989.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}