Lucene search
PRIOn knowledge basePRION:CVE-2023-32979HistoryMay 16, 2023 - 4:15 p.m.
Design/Logic Flaw
2023-05-1616:15:00
PRIOn knowledge base
www.prio-n.com
7
jenkins
email extension
plugin
logic
flaw
permission
check
form validation
attackers
overall
read
directory
jenkins home directory
controller file system
nvd
Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files in the email-templates/ directory in the Jenkins home directory on the controller file system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| email_extension | le | 2.96 |
Related
veracode
veracode
Improper Validation
2023-05-30 08:05:32
redhatcve
redhatcve
CVE-2023-32979
2023-05-17 05:27:52
github
github
Jenkins Email Extension Plugin missing permission check
2023-05-16 18:30:16
cve
cve
CVE-2023-32979
2023-05-16 16:15:10
osv
osv
Jenkins Email Extension Plugin missing permission check
2023-05-16 18:30:16
CVE-2023-32979
2023-05-16 16:15:10
nvd
nvd
CVE-2023-32979
2023-05-16 16:15:10
cvelist
cvelist
CVE-2023-32979
2023-05-16 16:00:00
nessus
nessus
RHEL 8 : OpenShift Container Platform 4.10.62 (RHSA-2023:3625)
2024-04-28 00:00:00
RHCOS 4 : OpenShift Container Platform 4.10.62 (RHSA-2023:3625)
2024-01-24 00:00:00
redhat
redhat