Description
A missing permission check in Jenkins XPath Configuration Viewer Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to create and delete XPath expressions.
Remediation
References
https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2658
Related Vulnerabilities
CVE-2022-45383 Vulnerability in maven package org.jenkins-ci.plugins:support-core
CVE-2019-10344 Vulnerability in maven package io.jenkins:configuration-as-code
CVE-2019-1003083 Vulnerability in maven package org.jenkins-ci.plugins:gearman-plugin
CVE-2019-10466 Vulnerability in maven package org.jenkins-ci.plugins.plugin:fireline
CVE-2013-2172 Vulnerability in maven package org.apache.santuario:xmlsec