CVE-2022-36914

CVE-2022-36914 affects Jenkins Files Found Trigger Plugin 1.5 and earlier. The root cause is a missing permission check in a form-validation method, enabling attackers with Overall/Read to determine the existence of an attacker-specified file path on the Jenkins controller filesystem. The public ...