CVE-2023-39156: Jenkins Bazaar

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in Jenkins Bazaar Plugin 1.22 and earlier allows attackers to delete previously created Bazaar SCM tags.

Affected products

• Jenkins Bazaar: up to and including 1.22

Published 2023-07-26. Last modified 2026-06-17.