[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7GsMG9g8NoWyUUAsExbClZY5xzyPuyRlcGXw6CDvYug":3,"g5a-risk:CVE-2024-28158":108},{"success":4,"data":5,"meta":105},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":31,"epssPercentile":25,"epssTimeSeries":32,"severity":34,"affectedProducts":35,"affectedProductsCount":41,"references":42,"referencesCount":57,"weaknesses":58,"weaknessesCount":41,"isActivelyExploited":67,"cisaInfo":25,"otxData":25,"relatedBlogPosts":68,"seoMetadata":69,"configurations":94,"relatedVendorCves":103,"notableEvents":104},"CVE-2024-28158","What is CVE-2024-28158?","A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build.","2024-03-06T17:15:10.94","2026-06-17T07:21:06.68",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":30},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":21,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,2.8,1.4,[],[],[],0.00308,[33,33,33,33,33,33,31],0.00306,"Medium",[36],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"jenkins","subversion_partial_release_manager","*","cpe:2.3:a:jenkins:subversion_partial_release_manager:*:*:*:*:*:jenkins:*:*",1,[43,48,53,55],{"url":44,"source":45,"tags":46},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F06\u002F3","Openwall",[47],"Mailing List",{"url":49,"source":50,"tags":51},"https:\u002F\u002Fwww.jenkins.io\u002Fsecurity\u002Fadvisory\u002F2024-03-06\u002F#SECURITY-3325","Jenkins",[52],"Vendor Advisory",{"url":44,"source":45,"tags":54},[47],{"url":49,"source":50,"tags":56},[52],4,[59],{"id":60,"name":61,"description":62,"extendedDescription":63,"status":64,"abstraction":65,"structure":66},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",false,[],{"title":70,"metaDescription":71,"keywords":72,"canonicalUrl":73,"structuredData":74},"What is CVE-2024-28158? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-28158, a medium severity cyber security vulnerability from 2024. A cross-site request forgery (CSRF) vulnerability in Jenk...","CVE-2024-28158, CVE-2024-28158 vulnerability, CVE-2024-28158 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, jenkins security, subversion_partial_release_manager vulnerability","\u002Fwhat-is\u002Fcve-2024-28158",{"@context":75,"@type":76,"headline":70,"description":71,"datePublished":9,"dateModified":10,"author":77,"publisher":81,"about":85,"mainEntityOfPage":89,"articleSection":92,"keywords":93},"https:\u002F\u002Fschema.org","TechArticle",{"@type":78,"name":79,"url":80},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":78,"name":79,"url":80,"logo":82},{"@type":83,"url":84},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":86,"name":6,"description":87,"additionalType":88},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":90,"@id":91},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-28158","Cybersecurity","CVE-2024-28158, CVE-2024-28158 vulnerability, CVE-2024-28158 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[95],{"Operator":25,"Negate":25,"Nodes":96},[97],{"Operator":98,"Negate":67,"CPEMatch":99},"OR",[100],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":101,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":102},"CB8CFE9D-9CB0-4E03-AB7F-70A587B65BCE","1.0.1",[],[],{"lastModified":10,"cacheTime":106,"version":107},1793233624959,"2.0",{"score":109,"band":110,"action":111,"scoredAt":112},18,"Info","Track","2026-10-28T07:00:46.673592+00:00"]