Description

Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files in the email-templates/ directory in the Jenkins home directory on the controller file system.

Remediation

References

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3088%20(1)

Related Vulnerabilities

CVE-2020-24591 Vulnerability in maven package org.wso2.carbon.analytics-common:org.wso2.carbon.event.receiver.core

CVE-2021-31522 Vulnerability in maven package org.apache.kylin:kylin-server-base

CVE-2014-3612 Vulnerability in maven package org.apache.activemq:activemq-broker

CVE-2019-1003054 Vulnerability in maven package info.bluefloyd.jenkins:jenkins-jira-issue-updater

CVE-2023-27602 Vulnerability in maven package org.apache.linkis:linkis-storage-script-dev-server

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Vendor Advisory CWE-732