[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7GsMG9g8NoWyUUAsExbClZY5xzyPuyRlcGXw6CDvYug":3,"g5a-risk:CVE-2024-28158":107},{"success":4,"data":5,"meta":104},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":31,"epssPercentile":25,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":40,"references":41,"referencesCount":56,"weaknesses":57,"weaknessesCount":40,"isActivelyExploited":66,"cisaInfo":25,"otxData":25,"relatedBlogPosts":67,"seoMetadata":68,"configurations":93,"relatedVendorCves":102,"notableEvents":103},"CVE-2024-28158","What is CVE-2024-28158?","A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build.","2024-03-06T17:15:10.94","2026-06-17T07:21:06.68",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":30},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":21,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,2.8,1.4,[],[],[],0.00306,[31,31,31,31,31,31,31],"Medium",[35],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"jenkins","subversion_partial_release_manager","*","cpe:2.3:a:jenkins:subversion_partial_release_manager:*:*:*:*:*:jenkins:*:*",1,[42,47,52,54],{"url":43,"source":44,"tags":45},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F06\u002F3","Openwall",[46],"Mailing List",{"url":48,"source":49,"tags":50},"https:\u002F\u002Fwww.jenkins.io\u002Fsecurity\u002Fadvisory\u002F2024-03-06\u002F#SECURITY-3325","Jenkins",[51],"Vendor Advisory",{"url":43,"source":44,"tags":53},[46],{"url":48,"source":49,"tags":55},[51],4,[58],{"id":59,"name":60,"description":61,"extendedDescription":62,"status":63,"abstraction":64,"structure":65},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",false,[],{"title":69,"metaDescription":70,"keywords":71,"canonicalUrl":72,"structuredData":73},"What is CVE-2024-28158? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-28158, a medium severity cyber security vulnerability from 2024. A cross-site request forgery (CSRF) vulnerability in Jenk...","CVE-2024-28158, CVE-2024-28158 vulnerability, CVE-2024-28158 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, jenkins security, subversion_partial_release_manager vulnerability","\u002Fwhat-is\u002Fcve-2024-28158",{"@context":74,"@type":75,"headline":69,"description":70,"datePublished":9,"dateModified":10,"author":76,"publisher":80,"about":84,"mainEntityOfPage":88,"articleSection":91,"keywords":92},"https:\u002F\u002Fschema.org","TechArticle",{"@type":77,"name":78,"url":79},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":77,"name":78,"url":79,"logo":81},{"@type":82,"url":83},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":85,"name":6,"description":86,"additionalType":87},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":89,"@id":90},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-28158","Cybersecurity","CVE-2024-28158, CVE-2024-28158 vulnerability, CVE-2024-28158 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[94],{"Operator":25,"Negate":25,"Nodes":95},[96],{"Operator":97,"Negate":66,"CPEMatch":98},"OR",[99],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":100,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":101},"CB8CFE9D-9CB0-4E03-AB7F-70A587B65BCE","1.0.1",[],[],{"lastModified":10,"cacheTime":105,"version":106},1792356146956,"2.0",{"score":108,"band":109,"action":110,"scoredAt":111},18,"Info","Track","2026-10-16T07:01:04.136792+00:00"]