{"id":"CVE-2023-3414","aliases":["GHSA-rchx-rvh2-vx5j"],"url":"https://o3.security/vulnerability/CVE-2023-3414","summary":"Cross-Site Request Forgery (CSRF) in Jenkins Plug-in for ServiceNow DevOps","details":"A cross-site request forgery vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information. To address this issue, apply the 1.38.1 version of the Jenkins plug-in for ServiceNow DevOps on your Jenkins server.  No changes are required on your instances of the Now Platform. \n","published":"2023-07-26T18:20:18.253Z","modified":"2026-07-15T01:49:08.408033383Z","cvss":{"score":6.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"io.jenkins.plugins:servicenow-devops","fixedVersion":"1.38.1"}],"fix":null,"references":[{"type":"WEB","url":"https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1434118"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3414.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3414"},{"type":"PACKAGE","url":"https://github.com/jenkinsci/servicenow-devops-plugin"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-15T01:49:08.408033383Z"}}