Description
Jenkins 2.335 through 2.355 (both inclusive) allows attackers in some cases to bypass a protection mechanism, thereby directly accessing some view fragments containing sensitive information, bypassing any permission checks in the corresponding view.
Remediation
References
Related Vulnerabilities
Chamilo Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-1999019)
MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-58520)
Joomla! Core 2.5.x Information Disclosure (2.5.0 - 2.5.3)
Wordpress Plugin Backup Migration CVE-2023-6271 Vulnerability (CVE-2023-6271)
WordPress Plugin Copy or Move Comments Multiple Vulnerabilities (1.0.0)