Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2018/02/26 12:00 a.m.•22 views

Disclosure of user names and node names to unauthorized users through post-commit hook URL in Git Plugin

The class handling unauthenticated Git post-commit hook notification requests at the /git/ path unnecessarily extended another type that handled requests to the …/search/ sub-path. This allowed submission of search queries to Jenkins, and getting a list of search results usually available to anyo...

5.3CVSS6.2AI score0.03914EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder