[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7GsMG9g8NoWyUUAsExbClZY5xzyPuyRlcGXw6CDvYug":3,"g5a-risk:CVE-2024-28158":106},{"success":4,"data":5,"meta":103},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":30,"epssPercentile":25,"epssTimeSeries":31,"severity":32,"affectedProducts":33,"affectedProductsCount":39,"references":40,"referencesCount":55,"weaknesses":56,"weaknessesCount":39,"isActivelyExploited":65,"cisaInfo":25,"otxData":25,"relatedBlogPosts":66,"seoMetadata":67,"configurations":92,"relatedVendorCves":101,"notableEvents":102},"CVE-2024-28158","What is CVE-2024-28158?","A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier allows attackers to trigger a build.","2024-03-06T17:15:10.94","2025-06-06T15:26:24.78",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":25},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":21,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,2.8,1.4,[],[],0.00318,[30,30,30,30,30,30,30],"Medium",[34],{"vendor":35,"product":36,"version":37,"criteria":38,"vulnerable":4},"jenkins","subversion_partial_release_manager","*","cpe:2.3:a:jenkins:subversion_partial_release_manager:*:*:*:*:*:jenkins:*:*",1,[41,46,51,53],{"url":42,"source":43,"tags":44},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F06\u002F3","Openwall",[45],"Mailing List",{"url":47,"source":48,"tags":49},"https:\u002F\u002Fwww.jenkins.io\u002Fsecurity\u002Fadvisory\u002F2024-03-06\u002F#SECURITY-3325","Jenkins",[50],"Vendor Advisory",{"url":42,"source":43,"tags":52},[45],{"url":47,"source":48,"tags":54},[50],4,[57],{"id":58,"name":59,"description":60,"extendedDescription":61,"status":62,"abstraction":63,"structure":64},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",false,[],{"title":68,"metaDescription":69,"keywords":70,"canonicalUrl":71,"structuredData":72},"What is CVE-2024-28158? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-28158, a medium severity cyber security vulnerability from 2024. A cross-site request forgery (CSRF) vulnerability in Jenk...","CVE-2024-28158, CVE-2024-28158 vulnerability, CVE-2024-28158 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, jenkins security, subversion_partial_release_manager vulnerability","\u002Fwhat-is\u002Fcve-2024-28158",{"@context":73,"@type":74,"headline":68,"description":69,"datePublished":9,"dateModified":10,"author":75,"publisher":79,"about":83,"mainEntityOfPage":87,"articleSection":90,"keywords":91},"https:\u002F\u002Fschema.org","TechArticle",{"@type":76,"name":77,"url":78},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":76,"name":77,"url":78,"logo":80},{"@type":81,"url":82},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":84,"name":6,"description":85,"additionalType":86},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":88,"@id":89},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-28158","Cybersecurity","CVE-2024-28158, CVE-2024-28158 vulnerability, CVE-2024-28158 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[93],{"Operator":25,"Negate":25,"Nodes":94},[95],{"Operator":96,"Negate":65,"CPEMatch":97},"OR",[98],{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":99,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":100},"CB8CFE9D-9CB0-4E03-AB7F-70A587B65BCE","1.0.1",[],[],{"lastModified":10,"cacheTime":104,"version":105},1793212696756,"2.0",{"score":107,"band":108,"action":109,"scoredAt":110},18,"Info","Track","2026-07-01T10:32:06.429171+00:00"]