1 matches found
Disclosure of user names and node names to unauthorized users through post-commit hook URL in Git Plugin
The class handling unauthenticated Git post-commit hook notification requests at the /git/ path unnecessarily extended another type that handled requests to the …/search/ sub-path. This allowed submission of search queries to Jenkins, and getting a list of search results usually available to anyo...
5.3CVSS6.2AI score0.03914EPSS
SaveExploits2Affected Software1
20