CVE-2023-32979

Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files in the email-templates/ directory in the Jenkins home directory on the controller file system...

CVE-2023-32979

Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files in the email-templates/ directory in the Jenkins home directory on the controller file system...

CVE-2023-32979

Summary : CVE-2023-32979 affects the Jenkins Email Extension Plugin; a permission check is missing in a form-validation method, enabling attackers with Overall/Read to probe for the existence of files under the Jenkins home directory (email-templates/). This is supported by the NVD entry and corr...