Description
Jenkins before versions 2.44 and 2.32.2 is vulnerable to an insufficient permission check. This allows users with permissions to create new items (e.g. jobs) to overwrite existing items they don't have access to (SECURITY-321).
Remediation
References
Related Vulnerabilities
Apache Tomcat Improper Handling of Case Sensitivity Vulnerability (CVE-2026-43513)
Liferay DXP Incorrect Authorization Vulnerability (CVE-2025-3586)
SharePoint Weak Authentication Vulnerability (CVE-2026-55040)
Owncloud Cross-site Scripting (XSS) Vulnerability (CVE-2020-16255)
Caddy Web Server Improper Authentication Vulnerability (CVE-2026-52845)