CVE-2023-32978: Jenkins Lightweight Directory Access Protocol

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.

Affected products

• Jenkins Lightweight Directory Access Protocol: before 673.v034ec70ec2b_b (fixed in 673.v034ec70ec2b_b)

Published 2023-05-16. Last modified 2026-06-17.