CVE-2025-24402: CSRF vulnerability in Jenkins Azure Service Fabric Plugin

January 22, 2025

A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs obtained through another method.

References

github.com/advisories/GHSA-wh3h-j8wp-6p42
github.com/jenkinsci/service-fabric-plugin
nvd.nist.gov/vuln/detail/CVE-2025-24402
www.jenkins.io/security/advisory/2025-01-22/

Code Behaviors & Features

Detect and mitigate CVE-2025-24402 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →