Required CVE Record Information
Description
A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read permission to read the contents of a Groovy script by knowing its ID.
References 2 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- jenkins.io: Jenkins Security Advisory 2023-12-13 vendor-advisoryx_transferred
- http://www.openwall.com/lists/oss-security/2023/12/13/4 x_transferred