Lucene search
JenkinsCVELIST:CVE-2023-32979HistoryMay 16, 2023 - 4:00 p.m.
CVE-2023-32979
2023-05-1616:00:00
jenkins
www.cve.org
2
jenkins
email extension
overall/read
permission check
file existence
directory
Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files in the email-templates/ directory in the Jenkins home directory on the controller file system.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "Jenkins Email Extension Plugin",
"vendor": "Jenkins Project",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2.96.1",
"versionType": "maven"
},
{
"lessThan": "2.89.0.*",
"status": "unaffected",
"version": "2.89.0.2",
"versionType": "maven"
}
]
}
]Related
veracode
veracode
Improper Validation
2023-05-30 08:05:32
redhatcve
redhatcve
CVE-2023-32979
2023-05-17 05:27:52
github
github
Jenkins Email Extension Plugin missing permission check
2023-05-16 18:30:16
cve
cve
CVE-2023-32979
2023-05-16 16:15:10
prion
prion
Design/Logic Flaw
2023-05-16 16:15:00
osv
osv
Jenkins Email Extension Plugin missing permission check
2023-05-16 18:30:16
CVE-2023-32979
2023-05-16 16:15:10
nvd
nvd
CVE-2023-32979
2023-05-16 16:15:10
nessus
nessus
RHEL 8 : OpenShift Container Platform 4.10.62 (RHSA-2023:3625)
2024-04-28 00:00:00
RHCOS 4 : OpenShift Container Platform 4.10.62 (RHSA-2023:3625)
2024-01-24 00:00:00
redhat
redhat