Description
Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified XML/JSON API endpoints.
Remediation
References
Related Vulnerabilities
SharePoint Out-of-bounds Read Vulnerability (CVE-2020-1342)
ownCloud Incorrect Authorization Vulnerability (CVE-2021-29659)
MySQL CVE-2012-3147 Vulnerability (CVE-2012-3147)
WordPress Plugin WP Image Zoom Local File Inclusion (1.46)
WordPress Plugin FV Flowplayer Video Player URL Cross-Site Scripting (1.2.11)