CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-24402

A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs obtained through another method.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 50.3%

CVSS Severity

CVSS v3 Score 4.3

References

https://www.jenkins.io/security/advisory/2025-01-22/#SECURITY-3094

Products affected by CVE-2025-24402

Jenkins » Azure Service Fabric » Version: 1.0

cpe:2.3:a:jenkins:azure_service_fabric:1.0
Jenkins » Azure Service Fabric » Version: 1.1

cpe:2.3:a:jenkins:azure_service_fabric:1.1
Jenkins » Azure Service Fabric » Version: 1.3

cpe:2.3:a:jenkins:azure_service_fabric:1.3
Jenkins » Azure Service Fabric » Version: 1.4

cpe:2.3:a:jenkins:azure_service_fabric:1.4
Jenkins » Azure Service Fabric » Version: 1.5

cpe:2.3:a:jenkins:azure_service_fabric:1.5
Jenkins » Azure Service Fabric » Version: 1.6

cpe:2.3:a:jenkins:azure_service_fabric:1.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-24402

Products

Pricing

Contact Us