CVE-2023-2196 — Missing permission checks in Code Dx Plugin
A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Item/Read permission to check for the existence of an attacker-specified file path o…
Published: 2023-05-16 · CVSS: 4.3 · CVSS 3.1
A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Item/Read permission to check for the existence of an attacker-specified file path on an agent file system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7