Vulnerabilities (CVE)

Filtered by vendor Jenkins Subscribe
Filtered by product Pwauth Security Realm
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-24449 1 Jenkins 1 Pwauth Security Realm 2024-02-28 N/A 4.3 MEDIUM
Jenkins PWauth Security Realm Plugin 0.4 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.