2 matches found
Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code
Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code...
4CVSS5.5AI score0.01361EPSS
SaveExploits0References8Affected Software1
GHSA-5XM3-48V5-6H7V Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code
Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information by reading the plugin code...
5.3CVSS7.2AI score0.01361EPSS
SaveExploits0References8
20