medium4.3
CVE-2023-2196
A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Item/Read permission to check for the existence of an attacker-spe…
Impact
A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Item/Read permission to check for the existence of an attacker-specified file path on an agent file system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Code Dx | through 3.1.0 |